DESCRIPTION 



AUTHENTICATION SYSTEM, AUTHENTICATION APPARATUS, 
AND RECORDING MEDIUM 

5 

Background of the Invention 

1 . Field of Invention 
[0001] 

10 The present invention relates to a technology for 

authenticating the identity of the owner of a recording medium. 



2. Description of the Related Art 
[0002] 

15 Conventionally, as a method of checking a visitor from inside 

the residence, an intercommunication system or a TV door-phone 
has been used. 

With the above-mentioned methods, however, it is difficult 
to accurately identify a visitor who has disguised his/her 
20 appearance or voice. 
[0003] 

As a technology for overcoming the above-stated problem, 
the following personal information display system has been 
disclosed. The personal information display system includes a 
25 server for prestoring personal information and personal 
identification information, an input apparatus for receiving 
input personal identification information, and a user terminal 
for transmitting the receivedpersonal identification information 
to the server via a communication line. 
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The input apparatus has a fingerprint input apparatus . The 
fingerprint input apparatus receives a fingerprint input by a 
visitor. The input apparatus outputs the received fingerprint 
as the personal identification information to the user terminal. 
5 Upon receiving the personal identification information, the user 
terminal transmits the received personal identification 
information to the server. The server matches the received 
personal identification information against the personal 
identification information that has been prestored. Depending 
10 on the matching result, the server transmits personal information 
that has been stored in correlation with the personal 
identification information. The user terminal displays the 
personal information received from the server. 
[0004] 

15 Such a personal information display system enables the user 

to securely confirm the identity of a visitor, who can be a 
forwarding agent for example, that is to say, enables the user 
to verify the authenticity of the visit by the visitor. 

20 Brief Summary of the Invention 

[0005] 

However, although the above-introduced personal 
information display system can verify the authenticity of a person 
25 by checking his/her fingerprint, it cannot verify other types 
of authenticity such as the authenticity of an organization like 
a forwarding agent, or the authenticity of the business of the 
visit . 

It is therefore an object of the present invention to provide 
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an identity authentication system, authentication apparatus, 
recording medium, authentication method, authentication program, 
and a program recording medium that verify various types of 
authenticity in regards with a visit by a forwarding agent, which 
5 is not available with conventional technologies. 

[0006] 

The above-stated object is fulfilled by an authentication 
system, comprising: a portable recording medium of a forwarding 

10 agent; an authentication apparatus operable to verify 
authenticity of a visit by the forwarding agent, the authentication 
apparatus being provided in a residence of a person who is visited 
by the forwarding agent; and an input/output apparatus operable 
to perform inputting and outputting of information between the 

15 portable recording medium and the authentication apparatus, the 
input/output apparatus being provided at an entrance of the 
residence, wherein the portable recording medium stores therein, 
in advance, at least one piece of information concerning 
authenticity of the visit by the forwarding agent, and the 

20 authentication apparatus stores therein at least one piece of 
information used for verifying authenticity of the visit by the 
forwarding agent, and judges whether or not the visit by the 
forwarding agent is authentic by, via the input/ output apparatus, 
performing an authentication using the information stored in the 

25 portable recording medium and the information stored in the 
authentication apparatus. 

[0007] 

With the above-described construction, the authentication 
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apparatus of the authentication system can judge whether or not 
a visit by a home-visit company is authentic by, via the 
input/output apparatus, performing an authentication using the 
information stored in the portable recording medium of the 
5 forwarding agent and the information concerning the authenticity 
of the visit by the forwarding agent. While the conventional 
personal information display system can verify only the 
authenticity of a visitor himself /herself , the authentication 
apparatus of the present invention can verify various types of 

10 authenticity in regards with the visit by the forwarding agent, 
using the information concerning authenticity of the visit by 
the forwarding agent that is stored in the portable recording 
medium. Also, this enables a person visited by such a visitor 
to recognize, while staying inside the residence, whether or not 

15 the visit by a home-visit company is authentic. 
[0008] 

In the above stated-authentication system, the portable 
recording medium may be an IC card, the input/output apparatus 
is a card reader for the IC card, the card reader detects a lock 

20 status of an entrance door, and the authentication apparatus 
performs the authentication if the card reader detects that the 
entrance door is locked. 

With the above-described construction, the authentication 
apparatus of the authentication system can perform the 

25 authentication while the entrance door is locked. This enables 
a person visited by a visitor can judge whether or not to let 
the visitor in depending on the authentication result, without 
letting the visitor in until the authentication apparatus 
completes the authentication. That is to say, if the 
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authentication apparatus judges that a visit by a home-visit 
company is authentic, the person visited by the visitor can unlock 
the entrance door and let the visitor in. 

[0009] 

5 In the above stated-authentication system, the IC card may 

store therein certification information that certifies 
authenticity of the forwarding agent, as the information 
concerning authenticity of the visit by the forwarding agent, 
the authentication apparatus stores therein, as the information 

10 concerning verifying authenticity of the visit by the forwarding 
agent, authentication information that is used to examine the 
certification information, and the authentication apparatus 
performs, via the card reader, the authentication using the 
certification information and the stored authentication 

15 information to judge whether or not the visit by the forwarding 
agent is authentic. 
[0010] 

With the above-described construction, the authentication 
apparatus of the authentication system can perform an 

20 authentication using the certification information stored in the 
IC card and the authentication information stored in the 
authentication apparatus. 

In the above stated-authentication system, the IC card may 
further store therein first visit information that indicates a 

25 business of the visit by the forwarding agent, as the information 
concerning authenticity of the visit by the forwarding agent, 
the authentication apparatus further stores therein, as the 
information concerning verifying authenticity of the visit by 
the forwarding agent, second visit information used to examine 
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the first visit information, and the authentication apparatus, 
if a result of the authentication using the certification 
information and the authentication information is positive, 
acquires the first visit information from the IC card via the 
5 card reader, judges whether or not the acquired first visit 
information matches the stored second visit information, and if 
a result of the judgment is positive, judges that the visit by 
the forwarding agent is authentic. 
[0011] 

10 With the above-described construction, the authentication 

apparatus of the authentication system can judge that a visit 
by a home-visit company is authentic if the result of the 
authentication using the certification information and the 
authentication information is positive, and the first visit 

15 information matches the second visit information. That is to 
say, the authentication apparatus can judge that a visit by a 
home-visit company is authentic if it judges that the home-visit 
company is authentic and judges that the business of the visit 
by the forwarding agent is authentic. This enables a person 

20 visited by such a visitor to avoid an improper visit . For example, 
it is possible to avoid an improper visit by someone who disguises 
an authentic visitor. 
[0012] 

In the above stated-authentication system, the first visit 
25 information may be first time information that indicates a time 
period for the visit by the forwarding agent, the second visit 
information is second time information that indicates a time period 
for the visit by the forwarding agent, and the authentication 
apparatus judges whether or not the first time information matches 
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the second time information. 

With the above-described construction, the authentication 
system can include the first and second visit information that 
indicate a time period for a visit by a home-visit company, and 
5 the authentication apparatus can judge that the visit by the 
home-visit company is authentic if the first and second visit 
information indicates the same time period. 
[0013] 

In the above stated-authentication system, the first visit 
10 information may be first business information that indicates a 
business of the visit by the forwarding agent, the second visit 
information is second business information that indicates a 
business of the visit by the forwarding agent, and the 
authentication apparatus judges whether or not the first business 
15 information matches the second business information. 

With the above-described construction, the authentication 
system can include the first and second visit information that 
indicate a business of a visit by a home-visit company, and the 
authentication apparatus can judge that the visit by the home-visit 
20 company is authentic if the first and second visit information 
indicates the same business of a visit. 
[0014] 

In the above stated-authentication system, the first visit 
information may include (i) first time information that indicates 
25 a time period for the visit by the forwarding agent and (ii) first 
business information that indicates a business of the visit by 
the forwarding agent, the second visit information may include 
(ill) second time information that indicates a time period for 
the visit by the forwarding agent and (iv) second business 
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information that indicates abusiness of the visitby the forwarding 
agent, and the authentication apparatus judges whether or not 
the first time information matches the second time information, 
and judges whether or not the first business information matches 
5 the second business information. 
[0015] 

With the above-described construction, the authentication 
system can include the first and second visit information that 
indicate a time period and a business of a visit by a home-visit 
10 company, and the authentication apparatus can judge that the visit 
by the home-visit company is authentic if the first and second 
visit information indicates the same time period and business 
of a visit. 

In the above stated-authentication system, the IC card may 
15 further store therein article information concerning an article 
delivered by the forwarding agent, and the authentication 
apparatus further acquires the article information from the IC 
card via the card reader, and if the authentication apparatus 
judges that the visitby the forwarding agent is authentic, displays 
20 the article information. 
[0016] 

With the above-described construction, the authentication 
apparatus of the authentication system can display article 
information acquired from the IC card if the authentication 
25 apparatus judges that the visit by the home-visit company is 
authentic . 

In the above stated-authentication system, the article 
information may be a name of a sender of the article, and the 
authentication apparatus acquires the name of the sender from 



the IC card and displays the acquired name. 

With the above-described construction, the authentication 
apparatus of the authentication system can display the name of 
the sender of the article if the authentication apparatus judges 
5 that the visit by the home-visit company is authentic. This 
enables the person visited by a visitor to check the sender' s 
name and reject to receive the article if the displayed name is 
a stranger to the person. Accordingly, the person can reject 
receiving the article that has been sent from a suspicious sender. 
10 [0017] 

In the above stated-authentication system, the article 
information may be a name of the article, and the authentication 
apparatus acquires the name of the article from the IC card and 
displays the acquired name of the article. 

15 With the above-described construction, the authentication 

apparatus of the authentication system can display the name of 
the article if the authentication apparatus judges that the visit 
by the home-visit company is authentic. This enables the person 
visited by a visitor to reject to receive a suspicious article 

20 by checking the name of the article. 
[0018] 

In the above stated-authentication system, the article 
information may be a message from a sender of the article, and 
the authentication apparatus acquires the message from the IC 
25 card and displays the acquired message. 

With the above-described construction, the authentication 
apparatus of the authentication system can display a message from 
a sender of the article if the authentication apparatus judges 
that the visit by the home-visit company is authentic. 



[0019] 

In the above stated-authentication system, the IC card may 
further store therein visitor information for identifying a 
visitor, the authentication apparatus further acquires the 
5 visitor information from the IC card via the card reader, and 
if the authentication apparatus judges that the visit by the 
forwarding agent is authentic, displays the visitor information. 

With the above-described construction, the authentication 
apparatus of the authentication system can display visitor 
10 information acquired from the IC card if the authentication 
apparatus judges that the visit by the home-visit company is 
authentic . 
[0020] 

In the above stated-authentication system, the visitor 
15 information may be a name of the visitor, and the authentication 
apparatus acquires the name of the visitor from the IC card and 
displays the acquired name of the visitor. 

With the above-described construction, the authentication 
apparatus of the authentication system can display the name of 
20 the visitor if the authentication apparatus judges that the visit 
by the home-visit company is authentic. This enables the person 
visited by a visitor to judge whether or not the name written 
on the name tag of the visitor, which can be confirmed through 
a peephole of the door, matches the displayed name. 
25 [0021] 

In the above stated-authentication system, the visitor 
information may be an image of a facial photo of the visitor, 

and the authentication apparatus acquires the image of the facial 
photo of the visitor from the IC card and displays the acquired 



image of the facial photo. 

With the above-described construction, the authentication 
apparatus of the authentication system can display an image of 
a facial photo of the visitor if the authentication apparatus 
5 judges that the visit by the home-visit company is authentic. 
This enables the person visited by a visitor to judge whether 
or not the face of the visitor, which can be confirmed through 
a peephole of the door, matches the displayed image of the facial 
photo . 
10 [0022] 

In the above stated-authentication system, the visitor 
information may be a name and an image of a facial photo of the 
visitor, and the authentication apparatus acquires the name and 
the image of the facial photo of the visitor from the IC card 

15 and displays the acquired name and image of the facial photo. 

With the above-described construction, the authentication 
apparatus of the authentication system can display the name and 
an image of a facial photo of the visitor if the authentication 
apparatus judges that the visit by the home-visit company is 

20 authentic. This enables the person visited by a visitor to judge 
whether or not the name written on the name tag of the visitor 
and the face of the visitor, which can be confirmed through a 
peephole of the door, match the displayed name and image of the 
facial photo. 

25 [0023] 

In the above stated-authentication system, the 
authentication apparatus and the IC card may perform a 
challenge-response authentication process using the 
certification information and the authentication information. 
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With the above-described construction, the authentication 
apparatus of the authentication system can perform a 
challenge-response authentication process using the 
certification information and the authentication information. 
5 In the above stated-authentication system, the 

certification information may be an encryption key, the 
authentication information is a decryption key, the 
authentication apparatus generates challenge data, and outputs 
the generated challenge data to the IC card via the card reader, 

10 the IC card receives the challenge data from the authentication 
apparatus, generates response data by encrypting the challenge 
data using the encryption key, and outputs the generated response 
data to the authentication apparatus via the card reader, and 
the authentication apparatus receives the response data from the 

15 IC card, generates decrypted data by decrypting the response data 
using the decryption key, andperforms an authentication by judging 
whether or not the generated decrypted data matches the challenge 
data . 
[0024] 

20 With the above-described construction, the authentication 

apparatus of the authentication system can receive from the IC 
card the response data that was generated by encrypting the 
challenge data using the encryption key stored in the IC card, 
decrypt the response data, and perform the authentication using 

25 the decrypting result and the challenge data. This enables 
information to be securely protected from wiretapping during a 
transmission on a transmission path between the authentication 
apparatus and the IC card since the information is encrypted prior 
to the transmission. Also, even if the information obtained 
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through a wiretapping is decrypted, only the challenge data is 
revealed, but the certification information that indicates the 
authenticity of the home-visit company is not revealed. 

[0025] 

5 In the above stated-authentication system, the encryption 

key may be holder certification information that shows biometric 
characteristics of a holder of the IC card, and the authentication 
apparatus further receives holder authentication information that 
shows biometric characteristics of a visitor, and uses the holder 

10 authentication information as the decryption key. 

With the above-described construction, the authentication 
system can use, as the encryption key, holder certification 
information that shows biometric characteristics of a holder of 
the IC card, and can use, as the decryption key, holder 

15 authentication information that shows biometric characteristics 
of a visitor. 
[0026] 

In the above stated-authentication system, the 
authentication apparatus may be connected, via a network, to a 

20 distribution apparatus that distributes the decryption key, such 
that the authentication apparatus receives the decryption key 
distributed from the distribution apparatus and stores the 
received decryption key prior to the visit by the forwarding agent . 
With the above-described construction, the authentication 

25 apparatus of the authentication system can receive the decryption 
key from the distribution apparatus and store the received 
decryption key prior to the visit by the home-visit company. 
[0027] 

In the above stated-authentication system, the 
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authentication information may be a secret key, the IC card stores 
therein a first key that is obtained by executing a one-way function 
on a key that is identical with the secret key, the authentication 
apparatus generates challenge data, and outputs the generated 
5 challenge data to the IC card via the card reader, and the IC 
card receives the challenge data from the authentication apparatus, 
generates response data by encrypting the challenge data using 
the first key, and outputs the generated response data to the 
authentication apparatus via the card reader. Further, the 

10 authentication apparatus receives the response data from the IC 
card, generates a second key by executing a function, which is 
identical with the one-way function, on the secret key, generates 
decrypted data by decrypting the response data using the second 
key, and performs an authentication by judging whether or not 

15 the generated decrypted data matches the challenge data. 
[0028] 

With the above-described construction, the authentication 
apparatus of the authentication system can receive from the IC 
card the response data that was generated by encrypting the 

20 challenge data using the first key stored in the IC card, generate 
the second key, decrypt the response data using the generated 
second key, and perform the authentication using the decrypting 
result and the challenge data. This enables information to be 
securely protected from wiretapping during a transmission on a 

25 transmission path between the authentication apparatus and the 
IC card since the information is encryptedprior to the transmission 
Also, even if the information obtained through a wiretapping is 
decrypted, only the challenge data is revealed, but the 
certification information that indicates the authenticity of the 
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home-visit company is not revealed. Also, even if the first key- 
stored in the IC card is revealed, the secret key is not revealed 
since due to the property of the one-way function, the secret 
key cannot be generated from the first key. These are a few of 
5 advantageous effects of the present invention. 
[0029] 

In the above stated-authentication system, the 
authentication information may be is a first secret key, the IC 
card stores therein a second secret key that is identical with 

10 the first secret key, the authentication apparatus generates 
challenge data, and outputs the generated challenge data to the 
IC card via the card reader, and the IC card receives the challenge 
data from the authentication apparatus, generates response data 
by encrypting the challenge data using the second secret key, 

15 and outputs the generated response data to the authentication 
apparatus via the card reader. Further, the authentication 
apparatus receives the response data from the IC card, generates 
encrypted data by encrypting the challenge data using the first 
secret key, and performs an authentication by judging whether 

20 or not the generated encrypted data matches the response data. 
[0030] 

With the above-described construction, the authentication 
apparatus of the authentication system can receive from the IC 
card the response data that was generated by encrypting the 
25 challenge data using the first key stored in the IC card, generate 
encrypted data, and perform the authentication using the generated 
encrypted data and the response data. 

In the above stated-authentication system, the 
certification information may be a secret key, the authentication 
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information is a public key that corresponds to the secret key, 
the authentication apparatus generates challenge data, and 
outputs the generated challenge data to the IC card via the card 
reader, and the IC card receives the challenge data from the 
5 authentication apparatus, generates a digital signature of the 
received challenge data using the secret key, and outputs the 
generated digital signature as response data, to the 
authentication apparatus via the card reader. Further, the 
authentication apparatus receives the response data from the IC 
10 card, and thenperforms an authenticationbyperforming a signature 
verification on the received digital signature using the public 
key and the challenge data. 
[0031] 

With the above-described construction, the authentication 
15 apparatus of the authentication system can perform a 

challenge-response authentication using a digital signature. 

In the above stated-authentication system, the secret key 
may be holder certification information that shows biometric 
characteristics of a holder of the IC card, and the authentication 
20 apparatus further receives holder authentication information that 
shows biometric characteristics of a visitor, and uses the holder 
authentication information as the public key. 
[0032] 

With the above-described construction, the authentication 
25 system can use, as the secret key used for the digital signature, 
holder certification information that shows biometric 
characteristics of a holder of the IC card, and use, as the public 
key used for verifying the digital signature, holder 
authentication information that shows biometric characteristics 
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of a visitor. 

In the above stated-authentication system, the 
certification information may be a secret key, the authentication 
information is a public key that corresponds to the secret key, 
5 the authentication apparatus generates challenge data, generates 
encrypted challenge data by encrypting the generated challenge 
data using the public key, and outputs the generated encrypted 
challenge data to the IC card via the card reader, and the IC 
card receives the encrypted challenge data from the authentication 

10 apparatus, generates response data by decrypting the received 
encrypted challenge data using the secret key, and outputs the 
generated response data to the authentication apparatus via the 
card reader. Further, the authentication apparatus receives the 
response data from the IC card, and performs an authentication 

15 by judging whether or not the received response data matches the 
challenge data. 
[0033] 

With the above-described construction, the authentication 
apparatus of the authentication system can encrypt the challenge 

20 data using the public key, the IC card can generate response data 
by decrypting the encrypted challenge data and output the generated 
response data to the authentication apparatus, and the 
authentication apparatus can perform an authentication using the 
challenge data and the response data. 

25 In the above stated-authentication system, the IC card may 

store therein a public key certificate that is a proof of validity 
for the public key, which is also contained in the public key 
certificate, and the authentication apparatus further acquires 
the public key certificate from the IC card, performs an 
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authentication by judging whether or not the acquired public key- 
certificate is authentic, and if a result of the authentication 
is positive, stores therein the public key that is contained in 
the public key certificate. 
5 [0034] 

With the above-described construction, the authentication 
apparatus of the authentication system can acquire a public key 
from the public key certificate stored in the IC card, and store 
therein the acquired public key. 

10 In the above stated-authentication system, the IC card may 

store therein a second visit key that is identical with a first 
visit key that is distributed from the forwarding agent to the 
authentication apparatus prior to the visit, the authentication 
apparatus further stores therein the first visit key, if a result 

15 of an authentication by a challenge-response is positive, the 
authentication apparatus further generates visit examination data , 
and outputs the generated visit examination data to the IC card 
via the card reader, and the IC card receives the visit examination 
data from the authentication apparatus , generates encrypted visit 

20 examination data by encrypting the received visit examination 
data using the second visit key, and outputs the generated encrypted 
visit examination data to the authentication apparatus via the 
card reader. Further, the authentication apparatus receives the 
encrypted visit examination data from the IC card, decrypts the 

25 encrypted visit examination data using the first visit key, judges 
whether or not a result of the decrypting matches the visit 
examination data, and if it judges that the result of the decrypting 
matches the visit examination data, judges whether or not first 
visit information matches second visit information. 
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[0035] 

With the above-described construction, the authentication 
apparatus of the authentication system can perform an 
authentication using the first visit key and the second visit 
5 key if a result of a challenge-response authentication using the 
certification information and the authentication information is 
positive . 

In the above stated-authentication system, when the 
authentication apparatus outputs the challenge data to the IC 

10 card, the authentication apparatus may convert the challenge data 
into converted challenge information that has the same contents 
as the challenge data but has a different data structure from 
the challenge data, and output, to the IC card, the converted 
challenge information as the challenge data. 

15 [0036] 

With the above-described construction, the authentication 
apparatus of the authentication system, when outputting the 
challenge data to the IC card, can generate converted challenge 
information using the challenge data, and output the generated 
20 converted challenge information, as the challenge data, to the 
IC card. 

In the above stated-authentication system, when the IC card 
outputs the response data to the authentication apparatus, the 
IC card may convert the response data into converted response 
25 information that has the same contents as the response data but 
has a different data structure from the response data, and outputs, 
to the authentication apparatus, the converted response 
information as the response data. 
[0037] 
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With the above-described construction, the IC card of the 
authentication system, when outputting the response data to the 
authentication apparatus, can generate converted response 
information using the response data, and output the generated 
5 converted response information, as the response data, to the IC 
card. 

In the above stated-authentication system, the converted 
challenge information may be composed of one of an optical signal, 
a bar code, a QR code, an infrared signal, and an audio signal, 
10 and the converted response information is composed of one of an 
optical signal, a bar code, a QR code, an infrared signal, and 
an audio signal. 
[0038] 

With the above-described construction, the authentication 
15 apparatus of the authentication system can output converted 
challenge information, which is composed of one of an optical 
signal, bar code, QR code, infrared signal, and audio signal, 
to the IC card, and the IC card can output converted response 
information, which is composed of one of an optical signal, bar 
20 code, QR code, infrared signal, and audio signal, to the 
authentication apparatus. 

In the above stated-authentication system, the 
authentication apparatus may further store therein an apparatus 
identifier for identifying the authentication apparatus itself, 
25 the authentication apparatus outputs the apparatus identifier 
to the IC card via the card reader if the authentication apparatus 
judges that the visit by the forwarding agent is authentic, and 
the IC card, upon receiving the apparatus identifier from the 
authentication apparatus, stores therein the received apparatus 
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identifier. 
[0039] 

With the above-described construction, the authentication 
apparatus of the authentication system can output the apparatus 
5 identifier to the IC card. 

The object of the present invention is also fulfilled by 
an authentication apparatus for verifying authenticity of a visit 
by a forwarding agent using a portable recording medium which 
the forwarding agent has, the authentication apparatus being 

10 provided in a residence of a person who is visited by the forwarding 
agent, the authentication apparatus comprising: an information 
storage unit operable to store therein information used for the 
verifying of authenticity of the visit by the forwarding agent; 
and a judgment unit operable to judge whether or not the visit 

15 by the forwarding agent is authentic by, via an input/output 
apparatus provided at an entrance of the residence, performing 
an authentication using information stored in the portable 
recording medium concerning authenticity of the visit by the 
forwarding agent and using the information stored in the 

20 information storage unit. 
[0040] 

With the above-described construction, the authentication 
apparatus can judge whether or not a visit by a home-visit company 
is authentic by, via the input/output apparatus, performing an 
25 authentication using the information stored in the portable 
recordingmedium which the forwarding agent has and the information 
stored in the authentication apparatus. While the conventional 
personal information display system can verify only the 
authenticity of a visitor himself /herself , the authentication 
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apparatus of the present invention can verify various types of 
authenticity in regards with the visit by the forwarding agent, 
using the information concerning authenticity of the visit by 
the forwarding agent that is stored in the portable recording 
5 medium. Also, this enables a person visited by such a visitor 
to recognize, while staying inside the residence, whether or not 
the visit by a home-visit company is authentic. 
[0041] 

In the above stated-authentication apparatus, the 
10 input/output apparatus may be a card reader for the recording 
medium, the card reader detects a lock status of an entrance door, 
and the judgment unit performs the authentication if the card 
reader detects that the entrance door is locked. 

With the above-described construction, the authentication 
15 apparatus can perform the authentication while the entrance door 
is locked. This enables a person visited by a visitor can judge 
whether or not to let the visitor in depending on the authentication 
result, without letting the visitor in until the authentication 
apparatus completes the authentication. That is to say, if the 
20 authentication apparatus judges that a visit by a home-visit 
company is authentic, then the person visited by the visitor can 
unlock the entrance door and let the visitor in. 
[0042] 

In the above stated-authentication apparatus, the recording 
25 medium may store therein certification information that certifies 
authenticity of the forwarding agent, as the information 
concerning authenticity of the visit by the forwarding agent, 
the information storage unit stores therein, as the information 
concerning verifying authenticity of the visit by the forwarding 
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agent, authentication information that is used to examine the 
certification information, and the judgment unit performs, via 
the card reader, the authentication using the certification 
information and the stored authentication information to judge 
5 whether or not the visit by the forwarding agent is authentic. 
[0043] 

With the above-described construction, the authentication 
apparatus can perform an authentication using the authentication 
information and the certification information. 

10 In the above stated-authentication apparatus, the recording 

medium may further store therein first visit information that 
indicates a business of the visit by the forwarding agent, as 
the information concerning authenticity of the visit by the 
forwarding agent, and the information storage unit further stores 

15 therein, as the information concerning verifying authenticity 
of the visit by the forwarding agent, second visit information 
used to examine the first visit information. Further, the 
judgment unit, if a result of the authentication using the 
certification information and the authentication information is 

20 positive, acquires the first visit information from the recording 
medium via the card reader, and judges whether or not the acquired 
first visit information matches the stored second visit 
information, and, if a result of the judgment is positive, judges 
that the visit by the forwarding agent is authentic. 

25 [0044] 

With the above-described construction, the authentication 
apparatus can judge that a visit by a home-visit company is 
authentic if the result of the authentication using the 
certification information and the authentication information is 
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positive, and the first visit information matches the second visit 
information. That is to say, the authentication apparatus can 
judge that a visit by a home-visit company is authentic if it 
judges that the home-visit company is authentic and judges that 
5 the business of the visit by the forwarding agent is authentic. 
This enables a person visited by such a visitor to avoid an improper 
visit. For example, it is possible to avoid an improper visit 
by someone who disguises an authentic visitor. 
[0045] 

10 In the above stated-authentication apparatus, the recording 

medium may further store therein article information concerning 
an article delivered by the forwarding agent, and the 
authentication apparatus further comprises: an article 
information acquiring unit operable to acquire the article 

15 information from the recording medium via the card reader; and 
an article information display unit operable to display the article 
information if the judgment unit judges that the visit by the 
forwarding agent is authentic. 

With the above-described construction, the authentication 

20 apparatus can display article information acquired from the IC 
card if the authentication apparatus judges that the visit by 
the home-visit company is authentic. 
[0046] 

In the above stated-authentication apparatus, the recording 
25 medium may further store therein visitor information for 
identifying a visitor, and the authentication apparatus further 
comprises: a visitor information acquiring unit operable to 
acquire the visitor information from the recording medium via 
the card reader; and a visitor information display unit operable 
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to display the visitor information if the judgment unit judges 
that the visit by the forwarding agent is authentic. 

With the above-described construction, the authentication 
apparatus can display the visitor information, which is acquired 
5 from the recording medium, if the authentication apparatus judges 
that the visit by the home-visit company is authentic. 
[0047] 

In the above stated-authentication apparatus, the 
authentication apparatus and the recording medium may perform 

10 a challenge-response authentication process using the 
certification information and the authentication information. 

With the above-described construction, the authentication 
apparatus can perform a challenge-response authentication using 
the authentication information and the certification information . 

15 In the above stated-authentication apparatus, the 

authentication apparatus may be a mobile phone. 
[0048] 

With the above-described construction, the authentication 
apparatus can be a mobile phone. 

20 The object of the present invention is also fulfilled by 

a portable recording medium of a forwarding agent and is used 
by an authentication apparatus operable to verify authenticity 
of a visit by the forwarding agent, the authentication apparatus 
being provided in a residence of a person who is visited by the 

25 forwarding agent, the portable recording medium comprising: a 
storage unit operable to store therein in advance at least one 
piece of information concerning authenticity of the visit by the 
forwarding agent; a receiving unit operable to receive first data 
from the authentication apparatus via an input/output apparatus 
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provided at an entrance of the residence; a data generating unit 
operable to generate second data from the first data using the 
information stored in the storage unit, the second data being 
used for an authentication process; and an output unit operable 
5 to output the second data to the authentication apparatus via 
the input/output apparatus . 
[0049] 

With the above-described construction, the recording medium 
can receive the first data from the authentication apparatus via 

10 the input/output apparatus, generate the second data, which is 
used for the authentication process, from the first data using 
the stored information, and output the generated second data to 
the authentication apparatus. This enables the authentication 
apparatus to acquire, from the recording medium which the visitor 

15 who is outside the residence has, the second data that is necessary 
for the authentication process. 
[0050] 

In the above-stated recording medium, the storage unit may- 
store therein certification information that certifies 
20 authenticity of the forwarding agent, as the information 
concerning authenticity of the visit by the forwarding agent, 
and the data generating unit generates the second data using the 
certification information. 

With the above-described construction, the recording medium 
25 can generate the second data using the certification information . 
[0051] 

In the above-stated recording medium, the storage unit may 
further store therein visit information that indicates a business 
of the visit by the forwarding agent, as the information concerning 
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authenticity of the visit by the forwarding agent, and the output 
unit further outputs the visit information to the authentication 
apparatus via the input/output apparatus. 

With the above-described construction, the recording medium 
5 can store therein visit information as the information concerning 
authenticity of the visit by the forwarding agent, and output 
the visit information to the authentication apparatus. 
[0052] 

In the above-stated recording medium, the storage unit may 
10 further store therein article information concerning an article 

delivered by the forwarding agent, and the output unit further 

outputs the article information to the authentication apparatus 

via the input/output apparatus. 

With the above-described construction, the recording medium 
15 can store therein article information concerning the article, 

and output the article information to the authentication 

apparatus . 

[0053] 

In the above-stated recording medium, the storage unit may 
20 further store therein visitor information for identifying a 
visitor, and the output unit further outputs the visitor 
information to the authentication apparatus via the input/output 
apparatus . 

With the above-described construction, the recording medium 
25 can store therein visitor information concerning the visitor, 
and output the visitor information to the authentication 
apparatus . 
[0054] 

In the above-stated recording medium, the authentication 
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apparatus may store therein authentication information that is 
used to examine the certification information, and the 
authentication apparatus and the recording medium perform a 
challenge-response authentication process using the 
5 certification information and the authentication information. 

With the above-described construction, the recording medium 
can perform a challenge-response authentication using the 
certification information and the authentication information. 
[0055] 

10 The above-stated recording medium may be attached to a mobile 

phone . 

With the above-described construction, the recording medium 
can be attached to a mobile phone for use. 

15 Brief Description of the Drawings 
[0056] 

Fig . 1 shows an outline of the entire identity authentication 
system 1 . 

Fig. 2 is a block diagram showing the construction of the 
20 authentication card 10. 

Fig. 3 is a block diagram showing the construction of the 
user terminal 20 and the card reader 30. 

Fig. 4 shows the data structure of the key information table 
TlOO that is provided in the authentication key storage unit 201. 
25 Fig. 5 is a flowchart showing the operation of the identity 

authentication system 1 in the identity authentication process. 

Fig. 6 is a flowchart showing the operation of the identity 
authentication system 1 in the authentication process. 

Fig . 7 shows an outline of the entire identity authentication 



system lA. 

Fig. 8 is a block diagram showing the construction of the 
distribution apparatus 50A. 

Fig. 9 shows the data structure of the distribution key 
5 information table T200 that is provided in the distribution key 
storage unit 501A. 

Fig. 10 is a block diagram showing the construction of the 
authentication card lOA. 

Fig. 11 is a block diagram showing the construction of the 
10 user terminal 20A and the card reader 30A. 

Fig. 12 is a flowchart showing the operation of the identity 
authentication system lA in the distribution process. 

Fig. 13 is a flowchart showing the operation of the identity 
authentication system lA in the identity authentication process. 
15 Fig. 14 is a flowchart showing the operation of the identity 

authentication system lA in the authentication process. 

Fig. 15 shows an outline of the entire identity 
authentication system IB. 

Fig. 16 is a block diagram showing the construction of the 
20 authentication card lOB. 

Fig. 17 is a block diagram showing the construction of the 
user terminal 20B and the card reader SOB. 

Fig. 18 is a flowchart showing the operation of the identity 
authentication system IB in the identity authentication process. 
25 Fig. 19 is a flowchart showing the operation of the identity 

authentication system IB in the authentication process. 

Fig. 20 shows an outline of the entire identity 
authentication system IC. 

Fig. 21 is a block diagram showing the construction of the 
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distribution apparatus 50C. 

Fig. 22 is a block diagram showing the construction of the 
authentication card IOC. 

Figs . 23Aand 23B show the data structure of the certification 
5 visit information table T300 and the certification visit key table 
T310 that are provided in the visit key storage unit 105C. 

Fig. 24 is a block diagram showing the construction of the 
user terminal 20C and the card reader 30C. 

Fig. 25 is a flowchart showing the operation of the identity 
10 authentication system IC in the visit information distribution 
process . 

Fig. 26 is a flowchart showing the operation of the identity 

authentication system IC in the identity authentication process, 

continuing to Fig. 27. 
15 Fig. 27 is a flowchart showing the operation of the identity 

authentication system IC in the identity authentication process, 

continued from Fig. 26. 

Fig. 28 is a flowchart showing the operation of the identity 

authentication system IC in the visit key authentication process . 
20 Fig. 29 is a flowchart showing the operation of the identity 

authentication system IC in the visit information authentication 

process . 

Fig. 30 shows an outline of the entire identity 
authentication system ID. 
25 Fig. 31 is a block diagram showing the construction of the 

authentication card lOD and the second input/output apparatus 
70D. 

Fig. 32 is a block diagram showing the construction of the 
user terminal 20D and the first input/output apparatus 60D. 



Fig. 33 shows the data structure of the key information 
table T500. 

Fig. 34 shows the data structure of the information table 

T600. 

5 Fig. 35 is a block diagram showing the construction of the 

authentication card 1010. 

Fig. 36 is a block diagram showing the construction of the 
user terminal 1020 and the card reader 1030. 

Fig. 37 is a flowchart showing the operation of the identity 
10 authentication system 1000 in the identity authentication 
process . 

Fig. 38 is a flowchart showing the operation of the identity 
authentication system 1000 in the examination process. 

Fig. 39 is a flowchart showing the operation of the identity 
15 authentication system 1000 in the authentication process. 



[0057] 
4 

20 

Detailed Description of the Invention 

[0058] 

1 . Embodiment 1 

The following describes an identity authentication system 
25 1 in Embodiment 1 of the present invention. 

1.1 Outline of Identity authentication System 1 

The identity authentication system 1, as shown in Fig. 1, 
is composed of an authentication card 10, a user terminal 20, 
and a card reader 30. 
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[0059] 

The authentication card 10 belongs to a home-visit company 
(for example, a forwarding agent) which sends a person to visit 
the residence of the user. The authentication card 10 prestores 
5 an identity certification key that is unique to the home-visit 
company and certifies the authenticity of the authentication card 
10. The identity certification key is securely managed by the 
home-visit company. The identity certification key stored in 
the authentication card is different for each home-visit company. 
10 That is to say, a home-visit company that is different from the 
home-visit company, which has the authentication card 10, has 
an authentication card 11 (not illustrated) which prestores an 
identity certification key that is different from the one stored 
in the authentication card 10. 
15 [0060] 

It is stated above that the identity certification key stored 
in the authentication card is different for each home-visit company 
However, the identity certification key stored in the 
authentication card may be different for each authentication card 

20 held by the visitors belonging to the same home-visit company. 
In this case, the identity certification keys, which are used 
to certify the authenticity of the authentication cards themselves 
and are uniquely assigned to the visitors, are securely managed 
by the home-visit company. 

25 The user terminal 20 and the card reader 30 are apparatuses 

distributed by the home-visit company. The user terminal 20 
prestores an identity authentication key for verifying the 
authenticity of the authentication card 10. 
[0061] 
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The user terminal 20 is provided in a residence of a user. 
More specifically, the user terminal 20 is a base unit of an 
intercommunication system. The card reader 30, to/from which 
the authentication card 10 is attachable and detachable, is 
5 provided outside the residence of the user (for example, at an 
entrance of the residence) . More specifically, the card reader 
30 is a sub-unit of the intercommunication system that has the 
function of a card reader/writer that performs input/output of 
information with the authentication card 10 attached thereto. 

10 The user terminal 20 and the card reader 30 are connected to each 
other via a cable 40. The user terminal 20 is provided with a 
receiver 290 and functions and operates as the base unit of the 
intercommunication system. The card reader 30 is provided with 
a call button 390, a microphone 391, and a speaker 392 and functions 

15 and operates as a sub-unit of the intercommunication system. For 
example, a visitor depresses the call button 390 of the card reader 
30 to call the user inside the residence, and the user uses the 
receiver 290 to, over the intercommunication system, speak to 
the visitor, who uses the microphone 391 and the speaker 392 to 

20 speak with the user. 
[0062] 

The operation outline of the identity authentication system 

1 will be described using the authentication card 10, the user 
terminal 20, and the card reader 30. 
25 The identity authentication system 1, upon insertion of 

the authentication card 10 into an insertion slot 394 of the card 
reader 30, performs an authentication by a challenge-response 
system, based on the identity certification key stored in the 
authentication card 10 and the identity authentication key stored 
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in the user terminal 20, and displays the authentication result 

on a display unit 203 of the user terminal 20. 

[0063] 

The user can keep the entrance door locked while the visitor 
5 inserts the authentication card 10 into the card reader 30 . Also, 
the user can determine whether or not to unlock the door depending 
on the authentication result of the user terminal 20. That is 
to say, the user can open the door if the authentication result 
is affirmative, and can keep the door closed if the authentication 
10 result is negative. 
[0064] 

The encryption process used here is an encryption process 

using a secret key. One example of the encryption process using 

a secret key is DES . The description of DES is omitted here since 
15 it is well known. It is needless to say however that the same 

key is used as the identity certification key and the identity 

authentication key. 

Since the authentication card 11 (not illustrated) inserted 

in the card reader 30 of the identity authentication system 1 
20 operates in a similar manner to the authentication card 10, the 

authentication card 10 is used in the following description. 

[0065] 

1.2 Construction of Authentication card 10 

The construction of the authentication card 10 will be 
25 described. The authentication card 10 is a portable recording 
medium in which an IC is embedded. One specific example of the 
authentication card 10 is a memory card having an IC card function . 
As shown in Fig. 2, the authentication card 10 is composed of 
a certification key storage unit 101, a control unit 102, and 



an input/output unit 103. 
[0066] 

The authentication card 10 is specifically a computer system 
that includes a microprocessor, ROM, RAM and the like . A computer 
5 program is stored in the ROM. The microprocessor operates in 
accordance with the computer program and causes the authentication 
card 10 to achieve the functions. 

(1) Certification Key Storage Unit 101 

The certification key storage unit 101 is tamper-resistant, 
10 and stores a pair of an identity certification key and a 
certification key ID that identifies the identity certification 
key. 
[0067] 

In the following description, an identity certification 
15 key "SKI" is used as necessary. 

(2) Control Unit 102 

The control unit 102, upon receiving, from the card reader 
30 via the input/output unit 103, ID request information that 
requests a certification key ID, acquires a certification key 
20 ID from the certification key storage unit 101, and outputs the 
acquired certification key ID to the card reader 30 via the 
input/output unit 103. 
[0068] 

Further, upon receiving a random number "N" from the card 
25 reader 30, the control unit 102 acquires the identity certification 
key "SKI" from the certification key storage unit 101, and generates 
encrypted information Enc (SK1,N) by encrypting the random number 
"N", which was received from the card reader 30 , using the acquired 
identity certification key "SKI". The control unit 102 outputs 
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the generated encrypted information Enc (SKI, N) to the card reader 
30 via the input/output unit 103. The "Enc (SKI, N)" indicates 

that the information is encrypted information that was generated 
by encrypting random number "N" using identity certification key 
5 "SKI". 
[0069] 

(3) Input/Output Unit 103 

The input/output unit 103 receives information from the 
card reader 30 and outputs the information to the control unit 
10 102. Also, the input/output unit 103 receives information from 
the control unit 102 and outputs the information to the card reader 
30. 

1.3 Construction of User Terminal 20 

The construction of the user terminal 20 will be described. 

15 The user terminal 20 authenticates the authentication card 10 
inserted in the card reader 30. As shown in Fig. 3, the user 
terminal 20 includes an authentication key storage unit 201, an 
authentication unit 202, a display unit 203, and an input/output 
unit 204. 

20 [0070] 

The user terminal 20 is specifically a computer system that 
includes a microprocessor, ROM, RAM, a hard disk unit, a display 
unit and the like. A computer program is stored in the ROM or 
the hard disk unit. The microprocessor operates in accordance 
25 with the computer program and causes the user terminal 20 to achieve 
the functions . 
[0071] 

It should be noted here that since the function of the user 
terminal 20 as the base unit of the intercommunication system 



is well known, the illustration of the construction and description 
of it as the base unit are omitted. 

(1) Authentication key Storage Unit 201 

The authentication key storageunit 201 is tamper-resistant, 
5 and includes a key information table TlOO, an example of which 
is shown in Fig. 4. 
[0072] 

The key information table TlOO has an area for storing a 
plurality of pairs of an identity authentication key and an 

10 authentication key ID. 

The identity authentication key is used to verify the 
authenticity of the authentication card inserted in the card reader 
30, and as described earlier, is the same as the identity 
certification key. 

15 The authentication key ID is an identifier for identifying 

an identity authentication key, and is the same as a corresponding 
certification key ID. This enables an identity authentication 
key to be correlated with an identity certification key. 
[0073] 

20 The number of identity authentication keys stored in the 

key information table TlOO is the same as the number of companies . 

That is to say, the key information table TlOO stores the 
same number of pairs of an identity authentication key and an 
authentication key ID as the number of pairs of an identity 

25 certification key and a certification key ID respectively stored 
in the authentication card 10, 11, . . .12. 
[0074] 

(2) Authentication Unit 202 

The authentication unit 202 includes: a random number 
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storage area 250 for storing random numbers; and an ID storage 
area 251 for storing certification key IDs received from the card 
reader 30 via the input/output unit 204. 

The authentication unit 202 receives, from the card reader 
5 30 via the input/output unit 204, a certification key ID and 
detection information that indicates detection of an insertion 
of the authentication card 10 into the card reader 30, and stores 
the received certification key ID in the ID storage area 251. 
Then, the authentication unit 202 generates a random number "N", 
10 outputs the generated random number "N" to the card reader 30 
via the input/output unit 204, and stores the generated random 
number "N" in the random number storage area 250. 
[0075] 

Further, the authentication unit 202 receives the encrypted 
15 informationEnc (SK1,N) from the card reader 30 via the input/output 
unit 204. The authentication unit 202 then acquires, from the 
key information table TlOO, an identity authentication key that 
corresponds to an authentication key ID that matches the 
certification key ID stored in the ID storage area 251. The 
20 authentication unit 202 decrypts the encrypted information 
Enc(SKl,N) using the acquired identity authentication key, and 
judges whether or not the decrypting result matches the random 
number "N" stored in the random number storage area 250. 
[0076] 

25 If the decrypting result matches the random number "N", 

the authentication unit 202 verifies the authenticity of the 
authentication card inserted in the card reader 30, that is to 
say, determines that the authentication card inserted in the card 
reader 30 is authentic. And as the authentication result, the 



authentication unit 202 generates authentic visitor information 
that indicates that the visitor is an authentic visitor, and outputs 
the generated authentic visitor information to the display unit 
203. If the decrypting result does not match the random number 
5 "N", the authentication unit 202 determines that the 
authentication card inserted in the card reader 30 is unauthentic, 
and as the authentication result, generates unauthentic visitor 
information that indicates that the visitor is an unauthentic 
visitor, and outputs the generated unauthentic visitor 
10 information to the display unit 203 . Further, the authentication 
unit 202 deletes the random number "N" from the random number 
storage area 250, and deletes the certification key ID from the 
ID storage area 251. 
[0077] 

15 Also, upon receiving, from the card reader 30, a door lock 

message that urges the user to lock the entrance door, the 
authentication unit 202 outputs the received door lock message 
to the display unit 203. 

(3) Display Unit 203 

20 The display unit 203 is provided with, for example, a display, 

and displays information of the authentication result received 
from the authentication unit 202, toward outside. 
[0078] 

The display unit 203 also displays the door lock message 
25 received from the authentication unit 202 toward outside. 

(4) Input/Output Unit 204 

The input/output unit 204 receives information from the 

card reader 30 and outputs the information to the authentication 
unit 202. Also, the input/output unit 204 receives information 



from the authentication unit 202 and outputs the information to 
the card reader 30. 

[0079] 

1.4 Card Reader 30 
5 The card reader 30, as shown in Fig. 3, includes a card 

reading unit 301, an input/output unit 302, and a lock status 
detection unit 300. 

The card reader 30 is specifically a computer system that 
includes a microprocessor, ROM, RAM and the like. A computer 
10 program is stored in the ROM. The microprocessor operates in 
accordance with the computer program and causes the card reader 
30 to achieve the functions. 
[0080] 

It should be noted here that since the function of the card 
15 reader 30 as the sub-unit of the intercommunication system is 

well known, the illustration of the construction and description 

of it as the sub-unit are omitted. 

(1) Card Reading Unit 301 

The card reading unit 301 detects an insertion of the 
20 authentication card 10. Upon detecting the insertion of the 

authentication card 10, the card reading unit 301 outputs a lock 

status detection instruction, which instructs to detect the lock 

status of the entrance door, to the lock status detection unit 

300. 
25 [0081] 

Upon receiving, from the lock status detection unit 300, 
the lock detection information that indicates that it was detected 
that the entrance door is locked, the card reading unit 301 
generates the detection information and the ID request information, 
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and outputs the generated ID request information to the 
authentication card 10. After this, when it receives from the 
authentication card 10 a certification key ID, the card reading 
unit 301 outputs the received certification key IDandthegenerated 
5 detection information to the user terminal 20 via the input/output 
unit 302. 
[0082] 

Further, upon receiving the random number "N" from the user 
terminal 20 via the input/output unit 302, the card reading unit 

10 301 outputs the received random number "N" to the authentication 
card 10. Upon receiving the encrypted information Enc(SKl,N) 
from the authentication card 10, the card reading unit 301 outputs 
the received encrypted information Enc (SK1,N) to the user terminal 
20 via the input/output unit 302. 

15 (2) Lock Status Detection Unit 300 

The lock status detection unit 300 is connected to a key 
mechanism of locking the entrance door, and detects the lock status 
of the entrance door. 
[0083] 

20 Upon receiving the lock status detection instruction from 

the card reading unit 301, the lock status detection unit 300 
judges whether the entrance door is locked or unlocked. 

If it judges that the entrance door is locked, that is to 
say, if it detects a locked status in which the entrance door 
25 is locked, the lock status detection unit 300 outputs the lock 
detection information to the card reading unit 301. 

If it judges that the entrance door is unlocked, that is 
to say, if it does not detect the locked status, the lock status 
detection unit 300 outputs the door lock message that urges the 
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user to lock the entrance door, to the user terminal 20 via the 
input/output unit 302. The lock status detection unit 300 
continues to output the door lock message to the user terminal 
20 until it detects the locked status in which the entrance door 
5 is locked. 
[0084] 

(3) Input/Output Unit 302 

The input/output unit 302 receives information from the 

user terminal 20 and outputs the information to the card reading 
10 unit 301. Also, the input/output unit 302 receives information 

from the card reading unit 301 and outputs the information to 

the user terminal 20. 

The input/output unit 302 receives the door lock message 

from the lock status detection unit 300 and outputs the received 
15 message to the user terminal 20. 

[0085] 

1.5 Operation of Identity Authentication Process 

The identity authentication process is a process in which 

after the authentication card 10 is inserted into the card reader 
20 30, the user terminal 20 authenticates the identity . The identity 

authentication process will be described with reference to the 

flowchart shown in Fig. 5. 

When the card reader 30 detects an insertion of the 

authentication card 10 (step S5) , the card reader 30 detects the 
25 locked status in which the entrance door is locked (step S8) . 

If it does not detect the locked status, the card reader 

30 enters the wait status and continues to wait until it detects 

the locked status. When this happens, the user terminal 20 

continues to display the door lock message until the entrance 
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door is locked, as described earlier. 
[0086] 

If, in step S8, it detects the locked status in which the 
entrance door is locked, the card reader 30 generates the detection 
5 information and the ID request information, and outputs the 
generated ID request information to the authentication card 10 
(step SIO) . 

Upon receiving the ID request information, the 
authentication card 10 acquires a certification key ID from the 
10 certification key storage unit 101, and outputs the acquired 
certification key ID to the card reader 30 (step S15) . 
[0087] 

Upon receiving the certification key ID from the 
authentication card 10 (step S20) , the card reader 30 outputs 

15 the received certification key ID and the detection information 
generated in step SIO to the user terminal 20 (step S25) . 

Upon receiving the certification key ID and the detection 
information from the card reader 30, the user terminal 20 stores 
the received certification key ID in the ID storage area 251 (step 

20 S30) . The user terminal 20 then generates the random number "N", 
outputs the generated random number "N" to the card reader 30, 
and stores the generated random number "N" in the random number 
storage area 250 (step S35) . 
[0088] 

25 Upon receiving the random number "N" from the user terminal 

20, the card reader 30 outputs the received random number "N" 
to the authentication card 10 (step S40) . 

Upon receiving the random number "N" from the card reader 
30 (step S45), the authentication card 10 generates encrypted 
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information by encrypting the received random number "N" using 
the identity certification key stored in the certification key 
storage unit 101, and outputs the generated encrypted information 
to the card reader 30 (step S50) . 
5 [0089] 

Upon receiving the encrypted information from the 
authentication card 10, the card reader 30 outputs the received 
encrypted information to the user terminal 20 (step S55) . 

Upon receiving the encrypted information from the card 
10 reader 30, the user terminal 20 performs an authentication process 
using the received encrypted information and the identity 
authentication key stored in the authentication key storage unit 
201 (step S60) . 
[0090] 

15 1.6 Authentication Process 

Here, the authentication process that is executed in step 
S60 of the identity authentication process will be described with 
reference to the flowchart shown in Fig. 6. 

The user terminal 20 receives the encrypted information 

20 from the authentication card 10 via the card reader 30 (stepSlOO). 
The user terminal 20 then acquires, from the key information table 
TlOO, an identity authentication key that corresponds to an 
authentication key ID that matches the certification key ID stored 
in the ID storage area 251 in step S30 of the identity authentication 

25 process (step S105) . The user terminal 20 then decrypts the 
encrypted information received in step SlOO using the acquired 
identity authentication key (step SllO) . 
[0091] 

The user terminal 20 then judges whether or not the decrypting 
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result matches the random number "N" stored in the random number 
storage area 250 in step S35 of the identity authentication process 
(step S115) . 

If it judges that the decrypting result matches the random 
5 number "N" (YES in step S115) , the user terminal 20 generates 
authentic visitor information and displays the generated 
authentic visitor information (step S120) , deletes the random 
number "N" from the random number storage area 250 and deletes 
the certification key ID from the ID storage area 251 (step S130) , 
10 and ends the process. 
[0092] 

If it judges that the decrypting result does not match the 
random number "N" (NO in step S115) , the user terminal 20 generates 
unauthentic visitor information and displays the generated 
15 unauthentic visitor information (step S125) , deletes the random 
number "N" from the random number storage area 250 and deletes 
the certification key ID from the ID storage area 251 (step S130) , 
and ends the process. 

20 2 . Embodiment 2 

The following describes an identity authentication system 
lA in Embodiment 2 of the present invention. 
[0093] 

In the identity authentication system 1, the identity 
25 authentication key is stored in the authentication key storage 
unit 201 of the user terminal 20 in advance. In the identity 
authentication system lA, after the user terminal is distributed 
to the user, the identity authentication key is distributed from 
the home-visit company. 
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2.1 Outline of Identity authentication System lA 

The identity authentication system lA, as shown in Fig. 
7, is composed of an authentication card lOA, a user terminal 
20A, a card reader 30A, and a distribution apparatus 50A. The 
5 user terminal 20A and the card reader 30A are connected to each 
other via a cable 40A. 
[0094] 

The user terminal 20A is provided in a residence of a user. 
More specifically, the user terminal 20A is a base unit of an 

10 intercommunication system. The card reader 30A, to/from which 
the authentication card lOA is attachable and detachable, is 
provided outside the residence of the user (for example, at an 
entrance of the residence) . More specifically, the card reader 
30A is a sub-unit of the intercommunication system that has the 

15 function of a card reader/writer that performs input/output of 
information with the authentication card lOA attached thereto. 
The user terminal 20Ais provided with a receiver 290Aand functions 
and operates as the base unit of the intercommunication system. 
The card reader 30A is provided with a call button 390A, a microphone 

20 391A, and a speaker 392A and functions and operates as a sub-unit 
of the intercommunication system. For example, a visitor 
depresses the call button 390A of the card reader 30A to call 
the user inside the residence, and the user uses the receiver 
290Ato, over the intercommunication system, speak to the visitor, 

25 who uses the microphone 391A and the speaker 392A to speak with 
the user. 
[0095] 

The authentication card lOA is assigned to a visitor who 
visits the residence of the user from the home-visit company. 
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and prestores an identity certification key. The identity 
certification key stored in the authentication card is different 
for each visitor. That is to say, a visitor who is different 
from the visitor holding the authentication card lOA holds an 
5 authentication card llA (not illustrated) which prestores an 
identity certification key that is different from the one stored 
in the authentication card lOA. This enables a visitor, who visits 
the residence of the user, to be correlated with an identity 
certification key. 
10 [0096] 

Although not shown in Fig. 7, user terminals 21A, . . . 
22A, each of which has the same construction as the user terminal 
20A, are connected to the distribution apparatus 50A via the 
Internet. Also, the user terminals 21A, . . . 22A are respectively 

15 connected to card readers 31A, . . . 32A each of which has the 
same construction as the card reader 30A. 

Now, the outline of the identity authentication system lA 
will be described using the authentication card lOA, the user 
terminal 20A, and the card reader 30A. The description of the 

20 user terminals 21A, . . . 22A and the card readers 31A, . . . 
32A is omitted since they are the same as the user terminal 20A 
and the card reader 30A, respectively. 
[0097] 

In the identity authentication system lA, before a visitor 
25 visits the residence of the user, an identity authentication 
key corresponding to the visitor is transmitted to the user terminal 
20A via the Internet. Upon insertion of the authentication card 

lOA into an insertion slot 394A of the card reader 30A, the user 
terminal 20A performs an authentication by a challenge-response 
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system, based on the identity certification key stored in the 
authentication card lOAand the identity authentication key, which 
is received from the distribution apparatus 50A in advance and 
is stored therein, and displays the authentication result on a 
5 display unit 203A. 
[0098] 

The user can keep the entrance door locked while the visitor 
inserts the authentication card lOA into the card reader 30A. 
Also, the user can determine whether or not to unlock the door 
10 depending on the authentication result of the user terminal 20A. 
That is to say, the user can open the door if the authentication 
result is affirmative, and can keep the door closed if the 
authentication result is negative. 
[0099] 

15 The encryption process used here is, as is the case with 

the identity authentication system 1, an encryption process using 
asecretkey. Also, as is the case with the identity authentication 
system 1, it is needless to say that the same key is used as the 
identity certification key and the identity authentication key. 

20 Since the authentication card llA (not illustrated) inserted 

in the card reader 30A of the identity authentication system lA 
operates in a similar manner to the authentication card lOA, the 
authentication card lOA is used in the following description. 
[0100] 

25 2.2 Distribution Apparatus 50A 

The distribution apparatus 50A is an apparatus that, before 
a visitor visits the residence of the user, transmits an identity 

authentication key corresponding to the visitor to the user 
terminal 20A. As shown in Fig. 8, the distribution apparatus 



50A includes a distribution key storage unit 501A, a control unit 
502A, an operation unit 503A, and a transmission unit 504A. 
[0101] 

The distribution apparatus 50A is specifically a computer 
5 system that includes a microprocessor, ROM, RAM, a hard disk unit, 
a display unit, a keyboard, a modem and the like. A computer 
program is stored in the ROM or the hard disk unit. The 
microprocessor operates in accordance with the computer program 
and causes the distribution apparatus 50A to achieve the functions . 
10 [0102] 

(1) Distribution Key Storage Unit 501A 

The distribution key storage unit 501A includes a 
distribution key information table T200, an example of which is 
shown in Fig. 9. 

15 The distribution key information table T200 has an area 

for storing a plurality of pairs of a visitor ID and an identity 
authentication key. 
[0103] 

The visitor ID is an identifier for identifying the visitor. 

20 The identity authentication key is the same as the identity 
certification key, and is correlated with the visitor ID. 

The number of identity authentication keys stored in the 
distribution key information table T200 is the same as the number 
of visitors, namely, as the number of authentication cards. 

25 Also, it is possible to assign a visitor with an 

authentication card that stores an identity authentication key 
that corresponds to a visitor ID of the visitor, by correlating 
the identity authentication keys with the visitor IDs. 
[0104] 



(2) Control Unit 502A 

When the control unit 502A receives information indicating 
a registration of an identity authentication key, a visitor ID, 
and an identity authentication key from the operation unit 503A, 
5 the control unit 502A writes the received visitor ID and the 
received identity authentication key onto the distribution key 
storage unit 501A by correlating them with each other. 

Upon receiving, from the operation unit 503A, distribution 
information that is composed of a visitor ID and information 

10 indicating a distribution of an identity authentication key to 
the user terminal 20A, the control unit 502A acquires an identity 
authentication key that corresponds to the visitor ID contained 
in the received distribution information, from the distribution 
key information table T200. The control unit 502A transmits the 

15 acquired identity authentication key to the user terminal 20A 
via the transmission unit 504A. 
[0105] 

(3) Operation Unit 503A 

When the operation unit 503A receives information indicating 
20 a registration of an identity authentication key, a visitor ID, 
and an identity authentication key, through an operation of an 
operator of the distribution apparatus 50A, the operation unit 
503A transmits the information indicating a registration of an 
identity authentication key, the visitor ID, and the identity 
25 authentication key to the control unit 502A. 

Also, upon receiving the distribution information through 
an operation of the operator, the operation unit 503A outputs 
the received distribution information to the control unit 502A. 
[0106] 
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It should be noted here that the operator is not limited 
to the visitor himself /herself who visits the residence of the 
user, but may be any person who belongs to the home-visit company. 
(4) Transmission Unit 504A 
5 The transmission unit 504A receives information from the 

control unit 502A, and outputs the received information to the 
user terminal 20A via the Internet. 
[0107] 

2.3 Authentication card lOA 
10 The construction of the authentication card lOA will be 

described. The authentication card lOA is a portable recording 

medium in which an IC is embedded. One specific example of the 

authentication card lOA is a memory card having an IC card function . 

As shown in Fig. 10, the authentication card lOA is composed of 
15 a certification key storage unit lOlA, a control unit 102A, and 

an input/output unit 103A. 

[0108] 

The authentication card lOA is specifically a computer 
system that includes a microprocessor, ROM, RAM and the lilce. 
20 A computer program is stored in the ROM. The microprocessor 
operates in accordance with the computer program and causes the 
authentication card lOA to achieve the functions. 
(1) Certification Key Storage Unit lOlA 

The certification key storageunit lOlAis tamper-resistant, 
25 and stores an identity certification key that corresponds to a 
visitor . 
[0109] 

In the following description, an identity certification 
key "SKI" is used as necessary. 
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(2) Control Unit 102A 

The control unit 102A, upon receiving a random number "N" 
from the card reader 30A, acquires the identity certification 
key "SKI" from the certification key storage unit lOlA, and 
5 generates encrypted information Enc(SKl,N) by encrypting the 
random number "N", which was received from the card reader 30A, 
using the acquired identity certification key "SKI" . The control 
unit 102A outputs the generated encrypted information Enc (SK1,N) 
to the card reader 30A via the input/output unit 103A. 
10 [0110] 

(3) Input/Output Unit 103A 

The description of the input/output unit 103A is omitted 
since it is the same as the input/output unit 103. 
2.4 Construction of User Terminal 20A 

15 The construction of the user terminal 20Awill be described. 

As shown in Fig. 11, the user terminal 20A includes an 
authentication key storage unit 201A, an authentication unit 202A, 
a display unit 203A, an input/output unit 204A, and a receiving 
unit 205A. 

20 [0111] 

The user terminal 20A is specifically a computer system 
that includes a microprocessor, ROM, RAM, a hard disk unit, a 
display unit and the like. A computer program is stored in the 
ROM or the hard disk unit. The microprocessor operates in 
25 accordance with the computer program and causes the user terminal 
20A to achieve the functions. 
[0112] 

The description of the user terminals 21A, . . . 22A is 
omitted since they have the same construction as the user terminal 
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20A as described earlier in the description of the outline of 
the identity authentication system lA. 

Also, since the function of the user terminal 20A as the 
base unit of the intercommunication system is well known, the 
5 illustration of the construction and description of it as the 
base unit are omitted. 

(1) Authentication key Storage Unit 201A 

The authentication key storage unit 20 lA is tamper-resistant, 
and includes an area for storing an identity authentication key 
10 that is received from the distribution apparatus 50A via the 
Internet . 
[0113] 

(2) Receiving Unit 205A 

When the receiving unit 205A receives an identity 
15 authentication key from the distribution apparatus 50A via the 
Internet, the receiving unit 205A writes the received identity 
authentication key into the authentication key storage unit 201A. 

This enables the user terminal 20A to store, in advance, 
an identity authentication key that corresponds to a visitor. 
20 [0114] 

(3) Authentication Unit 202A 

The authentication unit 202A includes a random number 
storage area 250A for storing random numbers. 

Upon receiving, from the card reader 30Avia the input/output 
25 unit 204A, detection information that indicates detection of an 
insertion of the authentication card lOA into the card reader 
30A, the authentication unit 202A generates a random number "N", 
outputs the generated random number "N" to the card reader 30A 
via the input/output unit 204A, and stores the generated random 
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number "N" in the random number storage area 250A. 
[0115] 

Further, the authentication unit 202A receives the encrypted 
information Enc(SKl,N) from the card reader 30A via the 
5 input/output unit 204A. The authentication unit 202A then 
acquires, from the authentication key storage unit 201A, an 
identity authentication key that has been stored in the 
authentication key storage unit 201A in advance, and decrypts 
the encrypted information Enc (SK1,N) using the acquired identity 
10 authentication key, and judges whether or not the decrypting result 
matches the random number "N" stored in the random number storage 
area 250A. 
[0116] 

If the decrypting result matches the random number "N", 
15 the authentication unit 202A verifies the authenticity of the 
authentication card inserted in the card reader 30A, that is to 
say, determines that the authentication card inserted in the card 
reader 30A is authentic. And as the authentication result, the 
authentication unit 202A generates authentic visitor information 
20 that indicates that the visitor is an authentic visitor, and outputs 
the generated authentic visitor information to the display unit 
203A. If the decrypting result does not match the random number 
"N", the authentication unit 202A determines that the 
authentication card inserted in the card reader 30A is unauthentic, 
25 and as the authentication result, generates unauthentic visitor 
information that indicates that the visitor is an unauthentic 
visitor, and outputs the generated unauthentic visitor 
information to the display unit 203A. Further, the authentication 
unit 202A deletes the identity authentication key from the 
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authentication key storage unit 201A, and deletes the random number 
"N" from the random number storage area 250A. 

[0117] 

(4) Display Unit 203A 

5 The description of the display unit 203A is omitted since 

it is the same as the display unit 203. 

(5) Input/Output Unit 204A 

The description of the input/output unit 204A is omitted 
since it is the same as the input/output unit 204. 
10 [0118] 

2.5 Card Reader 30A 

The card reader 30A, as shown in Fig. 11, includes a card 
reading unit 301A and an input/output unit 302A. 

The card reader 30A is specifically a computer system that 
15 includes a microprocessor, ROM, RAM and the like. A computer 
program is stored in the ROM. The microprocessor operates in 
accordance with the computer program and causes the card reader 
30A to achieve the functions. 
[0119] 

20 The description of the card readers 31A, . . . 32A is omitted 

since they have the same construction as the card reader 30A as 
described earlier in the description of the outline of the identity 
authentication system lA. 

Also, since the function of the cardreader 30Aas the sub-unit 

25 of the intercommunication system is well known, the illustration 
of the construction and description of it as the sub-unit are 
omitted. 

(1) Card Reading Unit 301A 

The card reading unit 301A detects an insertion of the 



authentication card lOA. Upon detecting the insertion of the 
authentication card lOA, the card reading unit 301A generates 
the detection information and outputs the generated detection 
information to the user terminal 20A via the input/output unit 
5 302A. 
[0120] 

Further, upon receiving the random number "N" from the user 
terminal 20A via the input/output unit 302A, the card reading 
unit 301A outputs the received random number "N" to the 

10 authentication card lOA. Upon receiving the encrypted 
information Enc (SKI, N) from the authentication card lOA, the card 
reading unit 301A outputs the received encrypted information 
Enc (SKI, N) to the user terminal 20A via the input/output unit 
302A. 

15 [0121] 

(2) Input/Output Unit 302A 

The description of the input/output unit 302A is omitted 
since it is the same as the input/output unit 302. 
2.6 Operation of Distribution Process 

20 The distribution process in which the identity 

authentication key is distributed beforehand will be described 
with reference to the flowchart shown in Fig. 12. 
[0122] 

The distribution apparatus 50A receives the distribution 
25 information in response to a user operation (step S200) . The 
distribution apparatus 50A then acquires an identity 
authentication key from the distribution key storage unit 501A 

(step S205) , and distributes the acquired identity authentication 
key to the user terminal 20A via the Internet (step S210) . 
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Upon receiving the identity authentication key (step S215) , 
the user terminal 20A writes the received identity authentication 
key into the authentication key storage unit 201A (step S220) . 

[0123] 

5 2.7 Operation of Identity Authentication Process 

The identity authentication process is a process in which 
after the authentication card lOA is inserted into the card reader 
30A, the user terminal 20A authenticates the identity. The 
identity authentication process will be described with reference 
10 to the flowchart shown in Fig. 13. 

When the card reader 30A detects an insertion of the 
authentication card lOA (step S250) , the card reader 30A generates 
the detection information and outputs the generated detection 
information to the user terminal 20A (step S255) . 
15 [0124] 

Upon receiving the detection information from the card 
reader 30A, the user terminal 20A generates the random number 
"N", outputs the generated random number "N" to the card reader 
30A, and stores the generated random number "N" into the random 
20 number storage area 250A (step S260) . 

Upon receiving the random number "N" from the user terminal 
20A, the card reader 30A outputs the received random number "N" 
to the authentication card lOA (step S265) . 
[0125] 

25 Upon receiving the random number "N" from the card reader 

30A(step S270) , the authentication card lOA generates encrypted 
information by encrypting the received random number "N" using 

the identity certification key stored in the certification key 
storage unit lOlA, and outputs the generated encrypted information 
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to the card reader 30A (step S275) . 

Upon receiving the encrypted information from the 
authentication card lOA, the card reader 30A outputs the received 
encrypted information to the user terminal 20A (step S280) . 
5 [0126] 

Upon receiving the encrypted information from the card 
reader 30A, the user terminal 20A performs an authentication 
process using the received encrypted information and the identity 
authentication key stored in the authentication key storage unit 

10 201A (step S285) . 

2.8 Authentication Process 

Here, the authentication process that is executed in step 
S285 of the identity authentication process will be described 
with reference to the flowchart shown in Fig. 14. 

15 [0127] 

The user terminal 20A receives the encrypted information 
from the authentication card lOA via the card reader 30A (step 
S300) . The user terminal 20A then acquires, from the 
authentication key storage unit 201A, an identity authentication 
20 key that has been distributed from the distribution apparatus 
50A in advance (stepS305), and decrypts the encrypted information 
received in step S300 using the acquired identity authentication 
key (step S310) . 
[0128] 

25 The user terminal 20A then judges whether or not the 

decrypting result matches the random number "N" that was stored 
in the random number storage area 250A in step S260 of the identity 
authentication process (step S315) . 

If it judges that the decrypting result matches the random 



number "N" (YES in step S315) , the user terminal 20A generates 
authentic visitor information and displays the generated 
authentic visitor information (step S320) , deletes the identity- 
authentication key from the authentication key storage unit 201A, 
5 and deletes the random number "N" from the random number storage 
area 250A (step S330) , and ends the process. 
[0129] 

If it judges that the decrypting result does not match the 
random number "N" (NO in step S315) , the user terminal 20A generates 
10 unauthentic visitor information and displays the generated 
unauthentic visitor information (stepS325), deletes the identity 
authentication key from the authentication key storage unit 201A, 
and deletes the random number "N" from the random number storage 
area 250A (step S330) , and ends the process. 

15 

3 . Embodiment 3 

The following describes an identity authentication system 
IB in Embodiment 3 of the present invention. 

[0130] 

20 In the identity authentication system IB, when a visitor 

visits the residence of the user, the biometrics information, 
which shows biometric characteristics of the visitor, is used 

as the identity authentication key to determine whether or not 
the authentication card is authentic. 
25 3.1 Outline of Identity authentication System IB 

The identity authentication system IB, as shown in Fig. 
15, is composed of an authentication card lOB, a user terminal 
20B, and a card reader 30B. The user terminal 20B and the card 
reader 30B are connected to each other via a cable 40B. 



[0131] 

The user terminal 20B is provided in a residence of a user. 
More specifically, the user terminal 20B is a base unit of an 
intercommunication system. The card reader SOB, to/from which 
5 the authentication card lOB is attachable and detachable, is 
provided outside the residence of the user (for example, at an 
entrance of the residence) . More specifically, the card reader 
30B is a sub-unit of the intercommunication system that has the 
function of a card reader/writer that performs input/output of 

10 information with the authentication card lOB attached thereto. 
The user terminal 20B is provided with a receiver 290B and functions 
and operates as the base unit of the intercommunication system. 
The card reader SOB is provided with a call button S90B, a microphone 
391B, and a speaker 392B and functions and operates as a sub-unit 

15 of the intercommunication system. For example, a visitor 
depresses the call button 390B of the card reader SOB to call 
the user inside the residence, and the user uses the receiver 
290Bto, over the intercommunication system, speak to the visitor , 
who uses the microphone S91B and the speaker S92B to speak with 

20 the user. 
[01S2] 

The authentication card lOB is assigned to a visitor who 
visits the residence of the user from the home-visit company, 
and prestores, as an identity certification key, biometrics 
25 information of the visitor to whom the authentication card lOB 
is assigned. It is presumed here that the biometrics information 
is identity certification fingerprint information that is 
composed of characteristic points of the fingerprint pattern of 
the visitor. The identity certification key stored in the 
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authentication card is different for each visitor. That is to 
say, a visitor who is different from the visitor holding the 
authentication card lOB holds an authentication card IIB (not 
illustrated) which prestores an identity certification key that 
5 is different from the one stored in the authentication card lOB. 
[0133] 

The card reader 30B is provided with a fingerprint reading 
unit 310B that receives a fingerprint that is input by the visitor . 
Now, the outline of the identity authentication system IB 

10 will be described using the authentication card lOB, the user 
terminal 20B, and the card reader 30B. 

Upon insertion of the authentication card lOB into an 
insertion slot 394B of the card reader 30B, the user terminal 
20B requests the visitor to input a fingerprint. Upon receiving 

15 an input fingerprint through the fingerprint reading unit 310B 
of the card reader 30B, the identity authentication system IB 
generates, from the received fingerprint, identity authentication 
fingerprint information that is composed of characteristic points 
of the fingerprint pattern of the received fingerprint. The 

20 identity authentication system IB then performs an authentication 
by a challenge-response system, based on the generated identity 
authentication fingerprint information and the identity 
certification key stored in the authentication card lOB, and 
displays the authentication result on a display unit 203B of the 

25 user terminal 20B. 
[0134] 

The user can keep the entrance door locked while the visitor 

inserts the authentication card lOB into the card reader 30B. 
Also, the user can determine whether or not to unlock the door 
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depending on the authentication result of the user terminal 20B. 
That is to say, the user can open the door if the authentication 
result is affirmative, and can keep the door closed if the 
authentication result is negative. 
5 [0135] 

The encryption process used here is, as is the case with 
the identity authentication system 1, an encryption process using 
asecretkey. Also, as is the case with the identity authentication 
system 1, it is needless to say that the same key is used as the 

10 identity certification key and the identity authentication 
fingerprint information. 

Since the authentication card IIB (not illustrated) inserted 
in the card reader 30B of the identity authentication system IB 
operates in a similar manner to the authentication card lOB, the 

15 authentication card lOB is used in the following description. 
[0136] 

It is required that each time an authentic visitor inserts 
the authentication card lOB, the identity certification key stored 
in the authentication card lOB completely match the identity 

20 authentication fingerprint information generated by the card 
reader 30B. A method for always converting a fingerprint into 
a piece of unique fingerprint information has been disclosed. 
The description of the technology is omitted here since it is 
a well known technology. For details of such a conversion method, 

25 refer to Yoichi SHIBATA and others, "Mechanism PKI" (Computer 
Security Symposium 2003, ppl81-186, 2003) . 
[0137] 

3.2 Authentication card lOB 

The construction of the authentication card lOB will be 
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described. The authentication card lOB is a portable recording 
medium in which an IC is embedded. One specific example of the 
authentication card lOB is a memory card having an IC card function . 
As shown in Fig. 16, the authentication card lOB is composed of 
5 a certification key storage unit lOlB, a control unit 102B, and 
an input/output unit 103B. 
[0138] 

The authentication card lOB is specifically a computer 
system that includes a microprocessor, ROM, RAM and the like. 
10 A computer program is stored in the ROM. The microprocessor 
operates in accordance with the computer program and causes the 
authentication card lOB to achieve the functions. 

(1) Certification Key Storage Unit lOlB 

The certification key storageunit lOlB is tamper-resistant, 
15 and stores, as an identity certification key, a piece of identity 
certification fingerprint information that corresponds to a 
visitor . 
[0139] 

In the following description, an identity certification 
20 key "SKI" is used as necessary. 

(2) Control Unit 102B 

The description of the control unit 102B is omitted since 

it is the same as the control unit 102A of the authentication 
card lOA described in Embodiment 2. 
25 (3) Input/Output Unit 103B 

The description of the input/output unit 103B is omitted 
since it is the same as the input/output unit 103A of the 
authentication card lOA described in Embodiment 2. That is to 
say, the input/output unit 103B is also the same as the input/output 
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unit 103 of the authentication card 10 described in Embodiment 
1 . 

[0140] 

3.3 Construction of User Terminal 20B 
5 The construction of the user terminal 20B will be described. 

As shown in Fig. 17, the user terminal 20B includes an 
authentication key storage unit 201B, an authentication unit 202B, 
a display unit 203B, and an input/output unit 204B. 

The user terminal 20B is specifically a computer system 

10 that includes a microprocessor, ROM, RAM, a hard disk unit, a 
display unit and the like. A computer program is stored in the 
ROM or the hard disk unit. The microprocessor operates in 
accordance with the computer program and causes the user terminal 
20B to achieve the functions. 

15 [0141] 

Since the function of the user terminal 20B as the base 
unit of the intercommunication system is well known, the 
illustration of the construction and description of it as the 
base unit are omitted. 
20 (1) Authentication key Storage Unit 201B 

The authentication key storage unit 20 IB is tamper-resistant, 
and includes an area for storing the identity authentication 
fingerprint information. 
[0142] 

25 (2) Authentication Unit 202B 

The authentication unit 202B includes a random number 
storage area 250B for storing random numbers. 

Upon receiving, from the card reader 30B via the input/output 
unit 204B, the identity authentication fingerprint information 
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that was generated from the fingerprint input by the visitor, 
and receiving detection information that indicates detection of 
an insertion of the authentication card lOB into the card reader 
SOB, the authentication unit 202B writes the received identity 
5 authentication fingerprint information into the authentication 
key storage unit 201B, generates a random number "N", outputs 
the generated random number "N" to the card reader SOB via the 
input/output unit 204B, and stores the generated random number 
^^N" in the random number storage area 250B. 
10 [014S] 

Further, the authentication unit 202B receives the encrypted 
information Enc(SKl,N) from the card reader SOB via the 
input/output unit 204B. The authentication unit 202B then 
acquires the identity authentication fingerprint information from 

15 the authentication key storage unit 201B, and decrypts the 
encrypted information Enc(SKl,N) using the acquired identity 
authentication fingerprint information, and judges whether or 
not the decrypting result matches the random number "N" stored 
in the random number storage area 250B. 

20 [0144] 

If the decrypting result matches the random number "N", 
the authentication unit 202B verifies the authenticity of the 

authentication card inserted in the card reader SOB, that is to 
say, determines that the authentication card inserted in the card 
25 reader SOB is authentic. And as the authentication result, the 
authentication unit 202B generates authentic visitor information 
that indicates that the visitor is an authentic visitor, and outputs 
the generated authentic visitor information to the display unit 
203B. If the decrypting result does not match the random number 
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"N", the authentication unit 202B determines that the 
authentication card inserted in the card reader SOB is unauthentic, 
and as the authentication result, generates unauthentic visitor 
information that indicates that the visitor is an unauthentic 
5 visitor, and outputs the generated unauthentic visitor 
information to the display unit 203B . Further, the authentication 
unit 202B deletes the identity authentication key from the 
authentication key storage unit 201B, and deletes the randomnumber 
"N" from the random number storage area 2 SOB. 
10 [0145] 

(3) Display Unit 203B 

The description of the display unit 203B is omitted since 
it is the same as the display unit 203A of the user terminal 20A 
described in Embodiment 2. That is to say, the display unit 203B 
15 is also the same as the display unit 203 of the user terminal 
20 described in Embodiment 1. 

(4) Input/Output Unit 204B 

The description of the input/output unit 204B is omitted 
since it is the same as the input/output unit 204A of the user 
20 terminal 20A described in Embodiment 2. That is to say, the 
input/output unit 204B is also the same as the input/output unit 
204 of the user terminal 20 described in Embodiment 1. 
[0146] 

3.4 Card Reader 30B 
25 The card reader 30B, as shown in Fig. 17, includes a card 

reading unit 301B, an input/output unit 302B, a display unit 303B, 
and a fingerprint reading unit 310B. 

The card reader 30B is specifically a computer system that 
includes a microprocessor, ROM, RAM and the like. A computer 



program is stored in the ROM. The microprocessor operates in 
accordance with the computer program and causes the card reader 
30B to achieve the functions. 
[0147] 

5 Since the function of the card reader SOB as the sub-unit 

of the intercommunication system is well known, the illustration 
of the construction and description of it as the sub-unit are 

omitted . 

(1) Card Reading Unit 301B 

10 The card reading unit 301B detects an insertion of the 

authentication card lOB. Upon detecting the insertion of the 
authentication card lOB, the card reading unit 301B generates 
request information that requests an input of a fingerprint and 
outputs the generated request information to the display unit 

15 303B. Next, upon receiving the identity authentication 
fingerprint information from the fingerprint reading unit 310B, 
the card reading unit 301B generates the detection information, 
and outputs the generated detection information and the received 
identity authentication fingerprint information to the user 

20 terminal 20B via the input/output unit 302B. 
[0148] 

Further, upon receiving the random number "N" from the user 
terminal 20B via the input/output unit 302B, the card reading 
unit 301B outputs the received random number "N" to the 
25 authentication card lOB. Upon receiving the encrypted 
information Enc (SKI, N) from the authentication card lOB, the card 
reading unit 301B outputs the received encrypted information 
Enc (SKI, N) to the user terminal 20B via the input/output unit 
302B. 
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[0149] 

(2) Display Unit 303B 

The display unit 303B is providedwith, for example, adisplay, 
and displays the request information received from the card reading 
5 unit 301B, upon reception of it. This urges the visitor to input 
a fingerprint. 

(3) Fingerprint Reading Unit 310B 

The fingerprint reading unit 310B includes a fingerprint 
sensor. The fingerprint reading unit 310B reads a fingerprint 

10 pattern of the visitor using the fingerprint sensor, uses the 
read fingerprint pattern to generate identity authentication 
fingerprint information that is composed of characteristic points 
of the fingerprint pattern of the visitor, and outputs the generated 
identity authentication fingerprint information to the card 

15 reading unit 301B. 
[0150] 

It should be noted here that the characteristic points of 
the fingerprint pattern are, for example, an end point of a ridge, 
a direction of a branch point, and a positional relationship. 

20 (4) Input/Output Unit 302B 

The description of the input/output unit 302B is omitted 
since it is the same as the input/output unit 302A of the card 
reader 30A described in Embodiment 2. That is to say, the 
input/output unit 302B is also the same as the input/output unit 

25 302 of the card reader 30 described in Embodiment 1 . 
[0151] 

3.5 Operation of Identity Authentication Process 

The identity authentication process is a process in which 
after the authentication card lOB is inserted into the card reader 



SOB, the user terminal 20B authenticates the identity. The 
identity authentication process will be described with reference 
to the flowchart shown in Fig. 18. 

When the card reader 30B detects an insertion of the 
5 authentication card lOB (stepS400), the card reader SOB generates 
request information and displays the generated request 
information (step S405) . Next, the card reader SOB generates 
identity authentication fingerprint information from the 
fingerprint input by the visitor (stepS410), generates detection 
10 information (step S415) , and outputs, to the user terminal 20B, 
the identity authentication fingerprint information generated 
in step S410 and the detection information generated in step S415 
(step S420) . 
[0152] 

15 Upon receiving the identity authentication fingerprint 

information and the detection information from the card reader 
SOB, the user terminal 20B writes the received identity 
authentication fingerprint information into the authentication 
key storage unit 201B (step S425) . Next, the user terminal 20B 

20 generates a random number "N", outputs the generated random number 
"N" to the card reader SOB, and stores the generated random number 
"N" in the random number storage area 250B (step S4 30) . 
[015S] 

Upon receiving the random number "N" from the user terminal 
25 20B, the card reader SOB outputs the received random number "N" 
to the authentication card lOB (step S4S5) . 

Upon receiving the random number "N" from the card reader 

SOB (step S440) , the authentication card lOB generates encrypted 
information by encrypting the received random number "N" using 



the identity certification key stored in the certification key 
storage unit lOlB, and outputs the generated encrypted information 
to the card reader SOB (step S445) . 

[0154] 

5 Upon receiving the encrypted information from the 

authentication card lOB, the card reader 30B outputs the received 
encrypted information to the user terminal 20B (step S450) . 

Upon receiving the encrypted information from the card 
reader SOB, the user terminal 20B performs an authentication 
10 process using the received encrypted information and the identity 
authentication fingerprint information stored in the 
authentication key storage unit 201B (step S455) . 
[0155] 

3.6 Operation of Authentication Process 
15 Here, the authentication process that is executed in step 

S455 of the identity authentication process will be described 
with reference to the flowchart shown in Fig. 19. 

The user terminal 20B receives the encrypted information 
from the authentication card lOB via the card reader SOB (step 

20 S500) . The user terminal 20B then acquires the identity 
authentication fingerprint information from the authentication 
key storage unit 201B (step S505) . The user terminal 20B then 
decrypts the encrypted information received in step S500 using 
the acquired identity authentication fingerprint information 

25 (step S510) . 
[0156] 

The user terminal 20B then judges whether or not the 
decrypting result matches the random number "N" stored in the 
random number storage area 250B in step S430 of the identity 
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authentication process (step S515) . 

If it judges that the decrypting result matches the random 
number "N" (YES in step S515) , the user terminal 20B generates 
authentic visitor information and displays the generated 
5 authentic visitor information (step S520) , deletes the identity 
authentication fingerprint information from the authentication 
key storage unit 201B and deletes the random number "N" from the 
random number storage area 250B (step S530) , and ends the process . 
[0157] 

10 If it judges that the decrypting result does not match the 

random number "N" (NO in step S515) , the user terminal 20B generates 
unauthentic visitor information and displays the generated 
unauthentic visitor information (stepS525), deletes the identity 
authentication fingerprint information from the authentication 

15 key storage unit 201B and deletes the random number "N" from the 
random number storage area 250B (step S530) , and ends the process . 

4 . Embodiment 4 

The following describes an identity authentication system 
20 IC in Embodiment 4 of the present invention. 
[0158] 

The identity authentication system IC operates as follows. 

Before a visitor visits the residence of the user, 
information regarding the visit is transmitted to a user terminal 
25 provided inside the residence of the user. The same information 
as the transmitted one is stored in an authentication card. When 
the visitor visits the residence of the user, first biometrics 
information, which shows biometric characteristics of the visitor, 
is used as the identity authentication key to determine whether 
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or not the authentication card is authentic. If it is judged 
that the authentication card is authentic, it is then judged whether 
or not the information regarding the visit stored in the 
authentication card is identical with the information that was 
5 transmitted in advance. 
[0159] 

4.1 Outline of Identity authentication System IC 

The identity authentication system IC, as shown in Fig. 
20, is composed of an authentication card IOC, a user terminal 

10 20C, a card reader 30C, and a distribution apparatus 50C. The 
user terminal 20C and the card reader 30C are connected to each 
other via a cable 40C. 

The user terminal 20C is provided in a residence of a user. 
More specifically, the user terminal 20C is a base unit of an 

15 intercommunication system. The card reader 30C, to/from which 
the authentication card IOC is attachable and detachable, is 
provided outside the residence of the user (for example, at an 
entrance of the residence) . More specifically, the card reader 
30C is a sub-unit of the intercommunication system that has the 

20 function of a card reader/writer that performs input/output of 
information with the authentication card IOC attached thereto. 
The user terminal 20C is provided with a receiver 290C and functions 
and operates as the base unit of the intercommunication system. 
The card reader 30C is provided with a call button 390C, a microphone 

25 391C, and a speaker 392C and functions and operates as a sub-unit 
of the intercommunication system. For example, a visitor 
depresses the call button 390C of the card reader 30C to call 
the user inside the residence, and the user uses the receiver 
290Cto, over the intercommunication system, speak to the visitor. 
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who uses the microphone 391C and the speaker 392C to speak with 

the user. 

[0160] 

The authentication card IOC is assigned to a visitor who 
5 visits the residence of the user from the home-visit company, 
and prestores, as an identity certification key, biometrics 
information of the visitor to whom the authentication card lOB 
is assigned. It is presumed here that the biometrics information 
is identity certification fingerprint information that is 

10 composed of characteristic points of the fingerprint pattern of 
the visitor. The identity certification key stored in the 
authentication card is different for each visitor. That is to 
say, a visitor who is different from the visitor holding the 
authentication card IOC holds an authentication card IIC (not 

15 illustrated) which prestores an identity certification key that 
is different from the one stored in the authentication card IOC. 
[0161] 

The card reader 30C is provided with a fingerprint reading 
unit 310C that receives a fingerprint that is input by the visitor . 

20 Although not shown in Fig. 20, user terminals 21C, . . . 

22C, each of which has the same construction as the user terminal 
20C, are connected to the distribution apparatus 50C via the 
Internet. Also, the user terminals 21C, . . . 22C are respectively 
connected to card readers 31C, . . . 32C each of which has the 

25 same construction as the card reader 30C. 
[0162] 

Now, the outline of the identity authentication system IC 

will be described using the authentication card IOC, the user 
terminal 20C, and the card reader 30C. The description of the 
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user terminals 21C, . . . 22C and the card readers 31C, . . . 
32C is omitted since they are the same as the user terminal 20C 
and the card reader 30C, respectively. 

In the identity authentication system IC, before a 

5 visitor visits the residence of the user, the distribution 
apparatus 50C generates an authentication visit key and a 
certification visit key that are used to verify the authenticity 
of the visit by the visitor, and also generates authentication 
visit information that is composed of : time information indicating 

10 a time period for the visit; and business information indicating 
the business of the visit. The distribution apparatus 50C 
transmits the generated authentication visit key and 
authentication visit information to the user terminal 20C via 
the Internet. Further, the distribution apparatus 50C stores 

15 the certification visit key and the certification visit 
information that is identical with the transmitted authentication 
visit information, into the authentication card IOC by correlating 
them with a terminal ID that identifies the user terminal to which 
the authentication visit key and authentication visit information 

20 were transmitted. The certification visit information is 
composed of: certification time information indicating a time 
period for the visit; and certification business information 
indicating the business of the visit. 
[0163] 

25 Upon insertion of the authentication card IOC into an 

insertion slot 394C of the card reader 30C, the user terminal 
20C requests the visitor to input a fingerprint. Upon receiving 
an input fingerprint through the fingerprint reading unit 310C 
of the card reader 30C, the identity authentication system IC 



generates, from the received fingerprint, identity authentication 
fingerprint information that is composed of characteristic points 
of the fingerprint pattern of the received fingerprint. The 
identity authentication system IC then performs an authentication 
5 by a challenge-response system, based on the generated identity 
authentication fingerprint information and the identity 
certification key stored in the authentication card IOC. The 
encryption process used here is, as is the case with the identity 
authentication system 1, an encryption process using a secret 
10 key. Also, as is the case with the identity authentication system 
1, it is needless to say that the same key is used as the identity 
certification key and the identity authentication fingerprint 
information . 
[0164] 

15 Next, if it judges that the authentication card inserted 

in the card reader 30C is authentic, the identity authentication 
system IC performs an authentication by a challenge-response 
system based on the authentication visit key and the certification 
visit key to judge whether or not the certification visit key 

20 is authentic. The encryption process used here is an encryption 
process using a secret key. Also, it is needless to say that 
the same key is used as the authentication visit key and the 
certification visit key. 
[0165] 

25 Next, if it judges that the certification visit key is 

authentic in the above-described authentication, the identity 
authentication system IC judges whether or not the visit time 

period and the business of the visit contained in the certification 
visit information match the visit time period and the business 
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of the visit contained in the authentication visit information 
that was transmitted in advance, and displays the judgment result 
with the display unit 203C of the user terminal 20C. 

[0166] 

5 The user can keep the entrance door locked while the visitor 

inserts the authentication card IOC into the card reader 30C. 
Also, the user can determine whether or not to unlock the door 
depending on the authentication result of the user terminal 20C. 
That is to say, the user can open the door if the authentication 
10 result is affirmative, and can keep the door closed if the 
authentication result is negative. 
[0167] 

Since the authentication card lie (not illustrated) inserted 
in the card reader 30C of the identity authentication system IC 

15 operates in a similar manner to the authentication card IOC, the 
authentication card IOC is used in the following description. 

It is required that each time an authentic visitor inserts 
the authentication card IOC, the identity certification key stored 
in the authentication card IOC completely match the identity 

20 authentication fingerprint information generated by the card 
reader 30C. A method for always converting a fingerprint into 
a piece of unique fingerprint information has been disclosed. 
The description of the technology is omitted here since it is 
a well known technology. 

25 [0168] 

4.2 Distribution Apparatus 50C 

The distribution apparatus 50C is an apparatus that, before 
a visitor visits the residence of the user, transmits 
authentication visit information to the user terminal 20C. When 
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the distribution apparatus 50C transmits the authentication visit 
information to the user terminal 20C, the authentication card 
IOC corresponding to the visitor is attached to the distribution 
apparatus 50C. 

5 As shown in Fig. 21, the distribution apparatus 50C includes 

a terminal information storage unit 506C, a control unit 502C, 
an operation unit 503C, a transmission unit 504C, and an output 
unit 505C. 
[0169] 

10 The distribution apparatus 50C is specifically a computer 

system that includes a microprocessor, ROM, RAM, a hard disk unit, 
a display unit, a keyboard, a modem and the like. A computer 
program is stored in the ROM or the hard disk unit. The 
microprocessor operates in accordance with the computer program 

15 and causes the distribution apparatus 50C to achieve the functions . 
[0170] 

(1) Terminal Information Storage Unit 506C 

The terminal information storage unit 506C is 
tamper-resistant, and stores therein terminal IDs that uniquely 
20 identify user terminals that were distributed to the residences 
of the users. 

It should be noted here that the number of the terminal 

IDs stored in the terminal information storage unit 506C is 
identical with the number of distributed user terminals. 
25 [0171] 

(2) Control Unit 502C 

When the control unit 502C receives visit distribution 
information that indicates that the authentication visit 
information is distributed to the user terminal 20C, from the 
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operation unit 503C together with the visit time period and the 
business of the visit, the control unit 502C generates an 
authentication visit key and a certification visit key. 

The control unit 502C generates authentication visit 
5 information using the received visit time period and business 
of the visit, and transmits the generated authentication visit 
information and authentication visit key to the user terminal 
20C. 
[0172] 

10 The control unit 502C generates certification visit 

information using the received visit time period and business 
of the visit. The control unit 502C further acquires, from the 
terminal information storage unit 506C, a terminal ID for 
identifying the user terminal 20C, and outputs the acquired 

15 terminal ID and the generated certification visit information 
and certification visit key to the authentication card IOC via 
the output unit 505C, by correlating them with each other. 

(3) Operation Unit 503C 

When the operation unit 503C receives, through an operation 
20 of an operator, the visit distribution information together with 
the visit time period and the business of the visit, the operation 
unit 503C outputs the visit distribution information, visit time 
period, and business of the visit to the control unit 502C. 
[0173] 

25 It should be noted here that the operator is not limited 

to the visitor himself /herself who visits the residence of the 
user, but may be any person who belongs to the home-visit company. 

(4) Transmission Unit 504C 

The transmission unit 504C receives information from the 
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control unit 502C, and outputs the received information to the 
user terminal 20C via the Internet. 

[0174] 

(5) Output Unit 505C 
5 The output unit 505C receives information from the control 

unit 502C, and outputs the received information to the 
authentication card IOC. 
4.3 Authentication card IOC 

The construction of the authentication card IOC will be 
10 described. The authentication card IOC is a portable recording 
medium in which an IC is embedded. One specific example of the 
authentication card IOC is a memory card having an IC card function . 
As shown in Fig. 22, the authentication card IOC is composed of 
a certification key storage unit lOlC, a visit key storage unit 
15 105C, a control unit 102C, and an input/output unit 103C. 
[0175] 

The authentication card IOC is specifically a computer 
system that includes a microprocessor, ROM, RAM and the like. 
A computer program is stored in the ROM. The microprocessor 
20 operates in accordance with the computer program and causes the 
authentication card IOC to achieve the functions. 
(1) Certification Key Storage Unit lOlC 

The certification key storage unit lOlA is tamper- resistant, 
and stores, as an identity certification key, a piece of identity 
25 certification fingerprint information that corresponds to a 
visitor . 
[0176] 

In the following description, an identity certification 
key "SKI" is used as necessary. 
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(2) Visit Key Storage Unit 105C 

The visit key storage unit 105C is tamper-resistant, and 
includes a certification visit information table T300 and a 
certification visit key table T310, examples of which are 
5 respectively shown in Figs. 23A and 23B. 
[0177] 

The certification visit information table T300 has an area 
for storing one or more sets of a terminal ID, a piece of 
certification time information, and a piece of certification 

10 business information. The terminal ID is an identifier for 
identifying a user terminal distributed to a residence of a user. 
For example, terminal ID "T-IDl" indicates the user terminal 20C, 
and terminal ID "T-ID2" indicates user terminal 21C (not shown 
in Fig. 20) . The certification time information indicates a time 

15 period for a visit by a visitor. The certification business 
information indicates the business of the visit. 
[0178] 

The certification visit key table T310hasanareaforstoring 
one or more pairs of a terminal ID and a certification visit key. 
20 In regards with the terminal ID, an explanation was given earlier. 
The certification visit key is used to judge whether or not a 
visit by a visitor is authentic. 

(3) Control Unit 102C 

The control unit 102C, upon receiving a terminal ID, a piece 
25 of certification visit information, and a certification visit 
key from the distribution apparatus 50C via the input/output unit 
103C, writes the received terminal ID and certification visit 
information into the certification visit information table T300 . 
[0179] 



The control unit 102C writes the received terminal ID and 
certification visit key into the certification visit key table 
T310. 

Also, upon receiving a first random number "Nl" from the 
5 card reader 30C via the input/output unit 103C, the control unit 
102C acquires the identity certification key "SKI" from the 
certification key storage unit lOlC, and generates first encrypted 
information Enc(SKl,Nl) by encrypting the first random number 
"Nl", which was received from the card reader 30C, using the 
10 acquired identity certification key "SKI" . The control unit 102C 
outputs the generated encrypted information to the card reader 
30C via the input/output unit 103C. 
[0180] 

Also, upon receiving a terminal ID (for example, "T-IDl") 
15 and a second random number "N2" from the card reader 30C via the 
input/output unit 103C, the control unit 102C acquires a 
certification visit key "V-keyl" that corresponds to the received 
terminal ID, and generates second encrypted information 
Enc (V-keyl,N2) by encrypting the second random number "N2", which 
20 was received from the card reader 30C, using the acquired 
certification visit key "V-keyl". The control unit 102C outputs 
the generated second encrypted information to the card reader 
30C via the input/output unit 103C. Also, the control unit 102C 
temporarily stores the received terminal ID. 
25 [0181] 

Further, upon receiving, from the card reader 30C, output 
indication information that indicates outputting the 

certification visit information to the user terminal 20C, the 
control unit 102C acquires, from the certification visit 
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information table T300 , a piece of certification visit information 
that corresponds to the temporarily stored terminal ID, and outputs 
the acquired piece of certification visit information to the card 
reader 30C via the input/output unit 103C. 
5 (4) Input/Output Unit 103C 

The description of the input/output unit 103C is omitted 
since it is the same as the input/output unit 103B of the 
authentication card lOB described in Embodiment 3. That is to 
say, the input/output unit 103C is also the same as the input/output 
10 unit 103 of the authentication card 10 described in Embodiment 
1 and as the input/output unit 103A of the authentication card 
lOA described in Embodiment 2. 
[0182] 

4.4 Construction of User Terminal 20C 

15 The construction of the user terminal 20C will be described. 

As shown in Fig. 24, the user terminal 20C includes an 
authentication key storage unit 201C, an authentication unit 202C, 
a display unit 203C, an input/output unit 204C, a receiving unit 
205C, a visit information storage unit 206C, and a clock unit 

20 207C. 
[0183] 

The user terminal 20C is specifically a computer system 
that includes a microprocessor, ROM, RAM, a hard disk unit, a 
display unit and the like. A computer program is stored in the 
25 ROM or the hard disk unit. The microprocessor operates in 
accordance with the computer program and causes the user terminal 
20C to achieve the functions. 
[0184] 

The description of the user terminals 21C, . . . 22C is 
82 



omitted since they have the same construction as the user terminal 
20C as described earlier in the description of the outline of 
the identity authentication system IC. 

Also, since the function of the user terminal 20C as the 
5 base unit of the intercommunication system is well known, the 
illustration of the construction and description of it as the 
base unit are omitted. 

(1) Authentication key Storage Unit 201C 

The description of the authentication key storage unit 201C 
10 is omitted since it is the same as the authentication key storage 
unit 201B of the user terminal 20B described in Embodiment 3. 
[0185] 

(2) Visit Information Storage Unit 206C 

The visit information storage unit 206C is tamper-resistant, 
15 and includes an area for storing the authentication visit 
information and authentication visit key transmitted from the 
distribution apparatus 50C. 

(3) Receiving Unit 205C 

The receiving unit 205C, upon receiving the authentication 
20 visit information and authentication visit key from the 
distribution apparatus 50C via the Internet, writes the received 
authentication visit information and authentication visit key 
into the visit information storage unit 206C. 
[0186] 

25 With such an arrangement, the user terminal 20C can prestore 

information concerning a visit by a person in the home-visit 
company . 

(4) Clock Unit 207C 

The clock unit 207C measures time. 



(5) Authentication Unit 202C 

The authentication unit 202C includes a random number 
storage area 250C for storing random numbers, and prestores a 
terminal ID (in this example, "T-IDl") of the user terminal 20C. 
5 [0187] 

Upon receiving, from the card reader 30C via the input/output 
unit 204C, the identity authentication fingerprint information 
that was generated from the fingerprint input by the visitor, 
and receiving detection information that indicates detection of 

10 an insertion of the authentication card IOC into the card reader 
30C, the authentication unit 202C writes the received identity 
authentication fingerprint information into the authentication 
key storage unit 201C, generates the first random number "Nl", 
outputs the generated first random number "Nl" to the card reader 

15 30C via the input/output unit 204C, and stores the generated first 
random number "Nl" in the random number storage area 250C. 
[0188] 

Further, the authentication unit 202C receives the first 
encrypted information Enc(SKl,Nl) from the card reader 30C via 

20 the input/output unit 204C. The authentication unit 202C then 
acquires the identity authentication fingerprint information from 
the authentication key storage unit 201C, and decrypts the first 
encrypted information Enc(SKl,Nl) using the acquired identity 
authentication fingerprint information, and judges whether or 

25 not the decrypting result matches the first random number "Nl" 
stored in the random number storage area 250C. 
[0189] 

If the decrypting result does not match the first random 
number "Nl", the authentication unit 202C determines that the 
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authentication card inserted in the card reader 30C is unauthentic, 
and as the authentication result, generates unauthentic visitor 
information that indicates that the visitor is an unauthentic 
visitor, and outputs the generated unauthentic visitor 
5 information to the display unit 203C . Further, the authentication 
unit 202C deletes the identity authentication fingerprint 
information from the authentication key storage unit 201C, and 
deletes the first random number "Nl" from the random number storage 
area 250C. 
10 [0190] 

If the decrypting result matches the first random number 
"Nl", the authentication unit 202C verifies the authenticity of 
the authentication card inserted in the card reader 30C, that 
is to say, determines that the authentication card inserted in 

15 the card reader 30C is authentic. When this happens, the 
authentication unit 202C acquires the prestored terminal ID, 
generates the second random number "N2", and updates the random 
number storage area 250C from the first random number "Nl" to 
the second random number "N2" . The authentication unit 202C then 

20 outputs the generated second random number "N2" and the acquired 
terminal ID to the card reader 30C via the input/output unit 204C. 
Further, upon receiving the second encrypted information 
Enc (V-keyl,N2) from the card reader 30C via the input/output unit 
204C, the authentication unit 202C acquires the authentication 

25 visit key from the visit information storage unit 206C. 
[0191] 

The authentication unit 202C decrypts the received second 

encrypted information Enc (V-keyl , N2 ) using the acquired 
authentication visit key, and judges whether or not the decrypting 



result matches the second random number "N2" stored in the random 
number storage area 250C. 

If the decrypting result does not match the second random 
number "N2", the authentication unit 202C determines that the 
5 authentication card inserted in the card reader 30C is unauthentic, 
and as the authentication result, generates unauthentic visitor 
information that indicates that the visitor is an unauthentic 
visitor, and outputs the generated unauthentic visitor 
information to the display unit 203C . Further, the authentication 
10 unit 202C deletes the second random number "N2" from the random 
number storage area 250C. 
[0192] 

If the decrypting result matches the second random number 
"N2", the authentication unit 202C verifies the authenticity of 

15 the authentication visit key stored in the authentication card 
inserted in the card reader 30C, that is to say, determines that 
the visit key is authentic . When this happens , the authentication 
unit 202C generates the output indication information and outputs 
the generated output indication information to the card reader 

20 30C via the input/output unit 204C. Further, upon receiving the 
authentication visit information from the card reader 30C via 
the input/output unit 204C, the authentication unit 202C operates 
as follows. The authentication unit 202C acquires the 
authentication visit information from the visit information 

25 storage unit 206C. The authentication unit 202C then judges 
whether or not the certification time information and the 
certification business information contained in the received 
certification visit information respectively match the time 
information and the business information contained in the acquired 



authentication visit information. 
[0193] 

If at least one of them does not match, the authentication 
unit 202C determines that the authentication card inserted in 
5 the card reader 30C is unauthentic, and as the authentication 
result, generates the unauthentic visitor information, and 
outputs the generated unauthentic visitor information to the 
display unit 203C. 

If both of them match, the authentication unit 202C verifies 

10 the authenticity of the certification visit information stored 
in the authentication card inserted in the card reader 30C, that 
is to say, determines that the certification visit information 
stored is authentic. When this happens, the authentication unit 
202C acquires a current time from the clock unit 207C, and judges 

15 whether or not the acquired current time falls into the visit 
time period indicated by the visit time information . If it judges 
that the acquired current time does not fall into the visit time 
period, the authentication unit 202C determines that the 
authentication card inserted in the card reader 30C is unauthentic, 

20 generates the unauthentic visitor information, outputs the 
generated unauthentic visitor information to the display unit 
203C, deletes the authentication visit information and the 
authentication visit key from the visit information storage unit 
206C, and deletes the second random number "N2" from the random 

25 number storage area 250C. 
[0194] 

If it judges that the acquired current time falls into the 

visit time period, the authentication unit 202C generates the 
authentic visitor information, outputs the generated authentic 



87 



visitor information to the display unit 203C, deletes the 
authentication visit information from the visit information 
storage unit 206C, and deletes the second random number "N2" from 
the random number storage area 250C. 
5 (6) Display Unit 203C 

The description of the display unit 203C is omitted since 
it is the same as the display unit 203B of the user terminal 20B 
described in Embodiment 3. That is to say, the display unit 203C 
is also the same as the display unit 203 of the user terminal 
10 20 described in Embodiment 1 and as the display unit 203A of the 
user terminal 20A described in Embodiment 2. 
[0195] 

(7) Input/Output Unit 204C 

The description of the input/output unit 204C is omitted 

15 since it is the same as the input/output unit 204B of the user 
terminal 20B described in Embodiment 3. That is to say, the 
input/output unit 204C is also the same as the input/output unit 
204 of the user terminal 20 described in Embodiment 1 and as the 
input/output unit 204A of the user terminal 20A described in 

20 Embodiment 2 . 
[0196] 

4.5 Card Reader 30C 

The card reader 30C, as shown in Fig. 24, includes a card 
reading unit 301C, an input/output unit 302C, a display unit 303C, 
25 and a fingerprint reading unit 310C. 

The card reader 30C is specifically a computer system that 
includes a microprocessor, ROM, RAM and the like. A computer 
program is stored in the ROM. The microprocessor operates in 
accordance with the computer program and causes the card reader 



30C to achieve the functions. 
[0197] 

The description of the card readers 31C, . . . 32C is omitted 
since they have the same construction as the card reader 30C as 
5 described earlier in the description of the outline of the identity 
authentication system IC. 

Also, since the function of the card reader 30C as the base 
unit of the intercommunication system is well known, the 
illustration of the construction and description of it as the 
10 base unit are omitted. 

(1) Card Reading Unit 301C 

The card reading unit 301C detects an insertion of the 
authentication card IOC. Upon detecting the insertion of the 
authentication card IOC, the card reading unit 301C generates 
15 request information that requests an input of a fingerprint and 
outputs the generated request information to the card reader 303C . 
Next, upon receiving the identity authentication fingerprint 
information from the fingerprint reading unit 310C, the card 
reading unit 301C generates the detection information, and outputs 
20 the generated detection information and the received identity 
authentication fingerprint information to the user terminal 20C 
via the input/output unit 302C. 
[0198] 

Further, upon receiving the first random number "Nl" from 
25 the user terminal 20C via the input/output unit 302C, the card 
reading unit 301C outputs the received first random number "Nl" 
to the authentication card IOC. Upon receiving the first 
encrypted information Enc(SKl,Nl) from the authentication card 
IOC, the card reading unit 30 IC outputs the received first encrypted 



information Enc(SKl,Nl) to the user terminal 20C via the 

input/output unit 302C. 

[0199] 

The card reading unit 301C, upon receiving a terminal ID 
5 and a second random number "N2" from the user terminal 20C via 
the input/output unit 302C, outputs the received terminal ID and 
second random number "N2" to the authentication card IOC . Further, 
upon receiving the second encrypted information Enc (V-keyl , N2 ) 
from the authentication card IOC, the card reading unit 30 IC outputs 
10 the received second encrypted information Enc (V-keyl, N2) to the 
user terminal 20C via the input/output unit 302C. 
[0200] 

Further, upon receiving the output indication information 
from the user terminal 20C via the input/output unit 302C, the 

15 card reading unit 301C outputs the received output indication 
information to the authentication card IOC. Further, upon 
receiving the certification visit information from the 
authentication card IOC, the card reading unit 301C outputs the 
received certification visit information to the user terminal 

20 20C via the input/output unit 302C. 

(2) Display Unit 303C 

The description of the card reader 303C is omitted since 
it is the same as the display unit 303B of the card reader 30B 
described in Embodiment 3. 
25 [0201] 

(3) Fingerprint Reading Unit 310C 

The description of the fingerprint reading unit 310C is 
omitted since it is the same as the fingerprint reading unit 310B 
of the card reader 30B described in Embodiment 3. 



(4) Input/Output Unit 302C 

The description of the input/output unit 302C is omitted 
since it is the same as the input/output unit 302B of the card 
reader SOB described in Embodiment 3. That is to say, the 
input/output unit 302C is also the same as the input/output unit 
302 of the card reader 30 described in Embodiment 1 and as the 
input/output unit 302A of the card reader 30A described in 
Embodiment 2 . 
[0202] 

4.6 Operation of Visit Information Distribution Process 

The visit information distribution process in which the 
authentication visit information is distributed beforehand will 
be described with reference to the flowchart shown in Fig. 25. 
When the distribution apparatus 50C receives, through an 
15 operation of the user, visit distribution information that 
indicates that the authentication visit information is 
distributed to the user terminal 20C, together with the visit 
time period and the business of the visit (step S600), the 
distribution apparatus 50C generates an authentication visit key 
20 and a certification visit key (stepS605) . Next, the distribution 
apparatus 50C generates authentication visit information using 
the generated authentication visit key and the visit time period 
and business of the visit received in step S600 (step S610) . The 
distribution apparatus 50C then transmits the generated 
25 authentication visit information and authentication visit key 
to the user terminal 20C (step S615) . Upon receiving the 
authentication visit information and authentication visit key 
from the distribution apparatus 50C (stepS620), the user terminal 
20C writes the received authentication visit information and 
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authentication visit key into the visit information storage unit 
206C (step S625) . 
[0203] 

The distribution apparatus 50C further generates 
certification visit information using the visit time period and 
business of the visit received in step S600 (stepS630), and outputs 
the generated certification visit information and the 
certification visit key generated in step S605 to the 
authentication card IOC (step S635) . 

Upon receiving the certification visit information, the 
authentication card IOC writes the received certification visit 
information into the visit key storage unit 105C (step S640) . 
[0204] 

4.7 Operation of Identity Authentication Process 
15 The identity authentication process, in which an 

authentication of the authentication card IOC inserted in the 
card reader 30C is performed, will be described with reference 
to the flowcharts shown in Figs. 26 and 27. 

When the card reader 30C detects an insertion of the 
20 authentication card IOC (stepS650), the card reader 30C generates 
request information and displays the generated request 
information (step S655) . Next, the card reader 30C generates 
identity authentication fingerprint information from the 
fingerprint input by the visitor (stepS660), generates detection 
25 information (step S665) , and outputs, to the user terminal 20C, 
the identity authentication fingerprint information generated 
in step S660 and the detection information generated in step S665 
(step S670) . 
[0205] 
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Upon receiving the identity authentication fingerprint 
information and the detection information from the card reader 
30C, the user terminal 20C writes the received identity 
authentication fingerprint information into the authentication 
5 key storage unit 201C (step S675) . Next, the user terminal 20C 
generates a first random number "Nl", outputs the generated first 
random number "Nl" to the card reader 30C, and stores the generated 
first random number "Nl" in the random number storage area 250C 
(step S680) . 
10 [0206] 

Upon receiving the first random number "Nl" from the user 
terminal 20C, the card reader 30C outputs the received first random 
number "Nl" to the authentication card IOC (step S685) . 

Upon receiving the first random number "Nl" from the card 

15 reader 30C (step S690) , the authentication card IOC generates first 
encrypted information by encrypting the received first random 
number "Nl" using the identity certification key stored in the 
certification key storage unit lOlC, and outputs the generated 
first encrypted information to the card reader 30C (step S695) . 

20 [0207] 

Upon receiving the first encrypted information from the 
authentication card IOC, the card reader 30C outputs the received 
first encrypted information to the user terminal 20C (step S700) . 

Upon receiving the first encrypted information from the 
25 card reader 30C, the user terminal 20C performs an authentication 
process using the received first encrypted information and the 
identity authentication fingerprint information stored in the 
authentication key storage unit 201C (step S705) . 
[0208] 



If it is judged in the authentication process that the 
authentication card inserted in the card reader is authentic, 
the user terminal 20C acquires a terminal ID (stepSVlO), generates 
a second random number "N2", and updates the random number storage 
5 area 250C from the first random number "Nl" to the second random 
number "N2" (step S715) . The user terminal 20C then outputs the 
acquired terminal ID and the generated second random number "N2" 
to the card reader 30C (step S720) . 
[0209] 

10 Upon receiving the terminal ID and the second random number 

"N2" from the user terminal 20C, the card reader 30C outputs the 
received terminal ID and second random number "N2" to the 
authentication card IOC (step S725) . 

Upon receiving the terminal ID and the second random number 

15 "N2" from the card reader 30C (step S730) , the authentication 
card IOC acquires a certification visit key corresponding to the 
received terminal ID from the certification visit key table T310 
(step S735) . The authentication card IOC then generates second 
encrypted information by encrypting the second random number "N2" 

20 using the acquired certification visit key, and outputs the 
generated second encrypted information to the card reader 30C 
(step S740) . 
[0210] 

Upon receiving the second encrypted information from the 
25 authentication card IOC, the card reader 30C outputs the received 
second encrypted information to the user terminal 20C (step S745) . 

Upon receiving the second encrypted information from the 
card reader 30C, the user terminal 20C performs a visit key 
authentication process using the received second encrypted 
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information and the authentication visit key that is contained 
in the authentication visit information stored in the visit 
information storage unit 206C (step S750) . 

[0211] 

5 If it judges in the visit key authentication process that 

the certification visit information stored in the authentication 
card IOC is authentic, the user terminal 20C generates output 
indication information, and outputs the generated output 
indication information to the card reader 30C (step S755) . 
10 Upon receiving the output indication information from the 

user terminal 20C, the card reader 30C outputs the received output 
indication information to the authentication card (step S760) . 
[0212] 

Upon receiving the output indication information from the 
15 card reader 30C, the authentication card IOC acquires 
certification visit information from the certification visit 
information table T300, and outputs the acquired certification 
visit information to the card reader 30C (step S765) . 

Upon receiving the certification visit information from 
20 the authentication card IOC, the card reader 30C outputs the 
received certification visit information to the user terminal 
20C (step S770) . 
[0213] 

Upon receiving the certification visit information from 
25 the card reader 30C, the user terminal 20C performs a visit 
information authentication process using the received 
certification visit information and the authentication visit 
information that is stored in the visit information storage unit 
2Q6C (step S775) . 



4.8 Authentication Process 

Here, the authentication process that is executed in step 
S705 of the identity authentication process shown in Fig. 26 will 
be described centering on changes from the authentication process 
5 shown in Fig. 19. 
[0214] 

If it is judged that the decrypting result matches the random 
number "N" (YES in step S515) , step S520 and after are not performed, 
but instead step S710 and after shown in Fig. 27 are performed. 

10 If it is judged that the decrypting result does not match the 
random number "N" (NO in step S515) , the steps are performed as 
shown in Fig. 19. It shouldbe notedhere that in the authentication 
process shown in Fig. 27, the steps are performed as shown in 
Fig . 1 9 by replacing the random number and the encrypted information 

15 with the first random number and the first encrypted information, 
respectively. 
[0215] 

4.9 Visit Key Authentication Process 

Here, the visit key authentication process that is executed 
20 in step S750 of the identity authentication process shown in Fig. 
27 will be described with reference to the flowchart shown in 
Fig. 28. 

The user terminal 20C receives the second encrypted 
information from the authentication card IOC via the card reader 
25 30C (step S800) . The user terminal 20C then acquires, from the 
visit information storage unit 206C, an authentication visit key 
(step S805) , decrypts the second encrypted information using the 
acquired authentication visit key (stepSSlO), and j udges whether 
or not the decrypting result matches the second random number 



"N2" stored in the random number storage area 250C (step S815) . 

[0216] 

If it is judged that the decrypting result matches the second 
random number "N2" (YES in step S815) , step S755 and after shown 
5 in Fig. 27 are performed. 

If the user terminal 20C judges that the decrypting result 
does not match the second random number '*'*N2" (NO in step S815) , 
the user terminal 20C generates unauthentic visitor information, 
outputs the generated unauthentic visitor information to the 
10 display unit 203C, and deletes the second random number "N2" from 
the random number storage area 250C (step S820) . 
[0217] 

4.10 Visit Information Authentication Process 

Here, the visit information authentication process that 
15 is executed in step S775 of the identity authentication process 

shown in Fig. 27 will be described with reference to the flowchart 

shown in Fig. 29. 

The user terminal 20C receives the certification visit 

information from the authentication card IOC via the card reader 
20 30C (step S850) . The user terminal 20C then acquires the 

authentication visit information from the visit information 

storage unit 206C (step S855) . 

[0218] 

The user terminal 20C judges whether or not the 
25 authentication time information contained in the acquired 
authentication visit information matches the certification time 
information contained in the received certification visit 
information, that is to say, judges whether or not the visit time 
period received beforehand matches the visit time period stored 
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in the authentication card IOC (step S860) . 

If it judges that the visit time period received beforehand 
matches the visit time period stored in the authentication card 
IOC (YES in step S860) , the user terminal 20C judges whether or 
5 not the authentication business information contained in the 
acquired authentication visit information matches the 
certification business information contained in the received 
certification visit information, that is to say, judges whether 
or not the business of the visit received beforehand matches the 
10 business of the visit stored in the authentication card IOC (step 
S865) . 
[0219] 

If it judges that the business of the visit received 
beforehand matches the business of the visit stored in the 

15 authentication card IOC (YES in step S865) , the user terminal 
20C acquires a current time from the clock unit 207C (step S870) , 
and judges whether or not the acquired current time falls into 
the visit time period indicated by the authentication time 
information (step S875) . 

20 If it judges that the acquired current time falls into the 

visit time period indicatedby the authentication time information 
(YES in step S875) , the user terminal 20C generates authentic 
visitor information, displays the generated authentic visitor 
information (step S880) , and deletes the authentication visit 

25 information and the authentication visit key from the visit 
information storage unit 206C and the second random number "N2" 
from the random number storage area 250C (step SB 90) . 
[0220] 

If it judges that the visit time period received beforehand 
98 



does not match the visit time period stored in the authentication 
card IOC (NO in step S860) , or if it judges that the business 
of the visit received beforehand does not match the business of 
the visit stored in the authentication card IOC (NO in step S865) , 
5 or if it judges that that the acquired current time does not fall 
into the visit time period indicated by the authentication time 
information (NO in step S875) , the user terminal 20C generates 
unauthentic visitor information, displays the generated 
unauthentic visitor information (step S885) , and deletes the 
10 authentication visit information and the authentication visit 
key from the visit information storage unit 20 6C and the second 
random number "N2" from the random number storage area 250C (step 
S890) . 
[0221] 

15 5. Summary of Embodiments 

As described above, in the identity authentication system 
of the present invention, an authentication is performed between 
the authentication card and the user terminal . This construction 
eliminates the need to perform an authentication using a server 

20 that is connected to a network, which is a conventional method. 
This solves, for example, a problem that an identity of a visitor 
is not available due to a communication failure between the user 
terminal and the server. 
[0222] 

25 Also, the identity authentication system of the present 

invention generates a random number each time an authentication 
is performed. This enables the encrypted information generated 

by the authentication card to have different contents each time 
an authentication is performed. This enhances the resistance 



characteristics against the spoofing attack that is carried out 
by wiretapping a communication path. 

Also, in the identity authentication system of the present 
invention, an identity authentication key can be distributed with 
5 given timing prior to a visit to a residence of a user. This 
makes it possible to avoid a network loading that is caused by 
the distribution of an identity authentication key. That is to 
say, it is possible to distribute a plurality of identity 
authentication keys to a plurality of residences of users with 
10 different timing. 
[0223] 

6. Modifications 

The above-described Embodiments 1, 2, 3, and 4 are provided 
as specific examples of the present invention. The present 
15 invention is not limited to the above-described embodiments, but 
may be achieved in various manners within the scope of the present 
invention. The following, for example, should be construed as 
the present invention. 

6.1 Modification of Communication Method 
20 The method of performing communications between the user 

terminal and the authentication card is not limited to those shown 
in the above-described Embodiments 1, 2, 3, and 4. Another 
communication method may be used. 
[0224] 

25 The construction of an identity authentication system ID 

shown in Fig. 30, for example, may be used. 

The identity authentication system ID will be described, 

centering on the differences from Embodiment 1. 
(A) Outline of Identity authentication System ID 



The identity authentication system ID is composed of an 
authentication card lOD, a user terminal 20D, a first input/output 
apparatus 60D, and a second input/output apparatus 70D to/from 
which the authentication card lOD is attachable and detachable. 
5 The following will describe an outline of the identity 
authentication system ID, using the authentication card lOD, the 
user terminal 20D, the first input/output apparatus 60D, and the 
second input/output apparatus 70D. 
[0225] 

10 The user terminal 20D is provided in a residence of a user. 

More specifically, the user terminal 20D is a base unit of an 
intercommunication system. The first input/output apparatus 60D 
is provided outside the residence of the user (for example, at 
an entrance of the residence) . More specifically, the first 

15 input/output apparatus 60D is a sub-unit of the intercommunication 
system. The user terminal 20D and the first input/output 
apparatus 60D are connected to each other via a cable 4 0D. The 
user terminal 20D is provided with a receiver 290D and functions 
and operates as the base unit of the intercommunication system. 

20 The first input/output apparatus 60D is provided with a call button 
690D, a microphone 691D, and a speaker 692D and functions and 
operates as a sub-unit of the intercommunication system. For 
example, a visitor depresses the call button 690D of the first 
input/output apparatus 60D to call the user inside the residence, 

25 and the user uses the receiver 290D to, over the intercommunication 
system, speak to the visitor, who uses the microphone 691D and 
the speaker 692D to speak with the user. 
[0226] 

The first input/output apparatus 60D is provided with an 
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image receiving unit 601D and a display unit 602D. The second 
input/output apparatus 70D is provided with an image receiving 
unit 702D and a display unit 703D . Data is input and output between 
the first input/output apparatus GOD and the second input/output 
5 apparatus 70D. 

The identity authentication system ID, upon insertion of 
the authentication card lOD into an insertion slot 790D of the 
second input/output apparatus 70D, performs the authentication 
process shown in Embodiment 1 by performing information 

10 input/output between the first input/output apparatus 60D and 
the second input/output apparatus 70D. It is presumed here that 
the information input/output between the first input/output 
apparatus GOD and the second input/output apparatus 70D is 
performed using the image information that is composed of QR code . 

15 The transfer of the image information is performed as follows. 
When the user terminal 20D receives the image information, the 
user terminal 20D receives image information displayed on the 
display unit 703D of the second input/output apparatus 70D, using 
the image receiving unit 601D of the first input/output apparatus 

20 GOD. When the authentication card lOD receives the image 
information, the authentication card lOD receives image 
information displayed on the display unit G02D of the first 
input/output apparatus GOD, using the image receiving unit 702D 
of the second input/output apparatus 70D. 

25 [0227] 

(B) Construction of Authentication card lOD 

The construction of the authentication card lOD will be 
described. The authentication card lOD is a portable recording 
medium in which an IC is embedded. One specific example of the 
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authentication card lOD is a memory card having an IC card function . 
As shown in Fig. 31, the authentication card lOD is composed of 
a certification key storage unit lOlD, a control unit 102D, and 
an input/output unit 103D. 
5 [0228] 

The authentication card lOD is specifically a computer 
system that includes a microprocessor, ROM, RAM and the like. 
A computer program is stored in the ROM. The microprocessor 
operates in accordance with the computer program and causes the 
10 authentication card lOD to achieve the functions. 

(a) Certification Key Storage Unit lOlD, Input/Output Unit 103D 

The description of the certification key storage unit lOlD 
and the input/output unit 103D is omitted since they are 
respectively identical with the certification key storage unit 
15 101 and the input/output unit 103. 
[0229] 

(b) Control Unit 102D 

The control unit 102D, upon receiving, from the second 
input/output apparatus 70D via the input/output unit 103D, ID 

20 request information that requests a certification key ID, acquires 
a certification key ID from the certification key storage unit 
lOlD. The control unit 102D generates an ID QR code using the 
acquired certification key ID, and outputs the generated ID QR 
code to the second input/output apparatus 70D via the input/output 

25 unit 103D. 
[0230] 

Further, upon receiving, from the second input/output 
apparatus 70D, a random number QR code that indicates a random 
number "N", the control unit 102D generates the random number 
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"N" from the received random number QR code. The control unit 
102D then acquires the identity certification key "SKI" from the 
certification key storage unit lOlD, and generates encrypted 
information Enc(SKl,N) by encrypting the random number "N" 
5 generated from the received random number QR code, using the 
acquired identity certification key "SKI" . The control unit 102D 
generates an encryption QR code using the generated encrypted 
information, and outputs the generated encryption QR code to the 
second input/output apparatus 70D via the input/output unit 103D . 

10 [0231] 

(C) Second Input/Output Unit 70D 

The construction of the second input/output apparatus 70D 
will be described. As shown in Fig. 31, the second input/output 
apparatus 70D includes a card reading unit 701D, an image receiving 

15 unit 702D, and a display unit 703D. 

The second input/output apparatus 70D is specifically a 
computer system that includes a microprocessor, ROM, RAM and the 
like. Acomputer program is stored in the ROM. Themicroprocessor 
operates in accordance with the computer program and causes the 

20 second input/output apparatus 70D to achieve the functions. 
[0232] 

(a) Card Reading Unit 701D 

The card reading unit 701D detects an insertion of the 
authentication card lOD. Upon detecting the insertion of the 
25 authentication card lOD, the card reading unit 701D generates 
the ID request information and outputs the generated ID request 
information to the authentication card lOD. Next, upon receiving 
the ID QR code from the authentication card lOD, the card reading 
unit 701D outputs the received ID QR code to the display unit 
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703D. 

[0233] 

Further, upon receiving the random number QR code from the 
first input/output apparatus 60D via the image receiving unit 
5 702D, the card reading unit VOID outputs the received random number 
QR code to the authentication card lOD. Upon receiving the 
encryption QR code from the authentication card lOD, the card 
reading unit 701D outputs the received encryption QR code to the 
display unit 703D. 
10 (b) Image Receiving Unit 702D 

The image receiving unit 702D is, for example, a camera, 
and takes an image that is displayed on the first input/output 
apparatus 60D, and outputs the taken image to the card reading 
unit 701D. 
15 [0234] 

(c) Display Unit 703D 

The display unit 703D is, forexample, adisplay, anddisplays 
an image received from the card reading unit 701D. 
(D) Construction of User Terminal 20D 
20 The construction of the user terminal 20D will be described. 

The user terminal 20D authenticates the authentication card lOD. 
As shown in Fig. 32, the user terminal 20D includes an 
authentication key storage unit 201D, an authentication unit 202D, 
a display unit 203D, and an input/output unit 204D. 
25 [0235] 

The user terminal 20D is specifically a computer system 
that includes a microprocessor, ROM, RAM, a hard disk unit, a 
display unit and the like. A computer program is stored in the 
ROM or the hard disk unit. The microprocessor operates in 
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accordance with the computer program and causes the user terminal 

20D to achieve the functions. 

[0236] 

It should be noted here that since the function of the user 
5 terminal 20D as the base unit of the intercommunication system 
is well known, the illustration of the construction and description 
of it as the base unit are omitted, 
(a) Authentication Key Storage Unit 201D, Display Unit 203D 
The description of the authentication key storage unit 201D 
10 and the display unit 203D is omitted since they have the same 
construction as the authentication key storage unit 201 and the 
display unit 203. 
[0237] 

(b) Authentication Unit 202D 

15 The authentication unit 202D includes: a random number 

storage area 250D for storing random numbers; and an ID storage 
area 251 for storing certification key IDs. 

The authentication unit 202D receives an ID QR code from 
the first input/output apparatus 60D via the input/output unit 

20 204D. The authentication unit 202D then generates a certification 
key ID from the received ID QR code, and stores the generated 
certification key ID into the ID storage area 251D. The 
authentication unit 202D then generates a random number "N" and 
stores the generated random number "N" into the random number 

25 storage area 250D. The authentication unit 202D also generates 
a random number QR code using the generated random number "N", 
and outputs the generated random number QR code to the first 
input/output apparatus 60D via the input/output unit 204D. 
Further, upon receiving an encryption QR code from the first 
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input/output apparatus 60D via the input/output unit 204D, the 
authentication unit 202D generates encrypted information 
Enc(SKl,N) using the received encryption QR code. Next, the 
authentication unit 202D acquires, from the authentication key 
5 storage unit 201D, an identity authentication key that corresponds 
to an authentication key ID that matches the certification key 
ID stored in the ID storage area 251D. The authentication unit 
202D then decrypts the encrypted information Enc(SKl,N) using 
the acquired identity authentication key, and judges whether or 

10 not the decrypting result matches the random number "N" stored 
in the random number storage area 250D. If the decrypting result 
matches the random number "N", the authentication unit 202D 
verifies the authenticity of the authentication card inserted 
in the second input/output apparatus 70D, that is to say, determines 

15 that the authentication card inserted in the second input/output 
apparatus 70D is authentic. And as the authentication result, 
the authentication unit 202D generates the authentic visitor 
information and outputs the generated authentic visitor 
information to the display unit 203D. If the decrypting result 

20 does not match the random number "N", the authentication unit 
202D determines that the authentication card inserted in the second 
input/output apparatus 70D is unauthentic, and as the 
authentication result, generates the unauthentic visitor 
information and outputs the generated unauthentic visitor 

25 information to the display unit 203D. 
[0238] 

Further, the authentication unit 202D deletes the random 
number "N" from the random number storage area 250D, and deletes 
the certification key ID from the ID storage area 251D. 
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(c) Input/Output Unit 204D 

The input/output unit 204D receives information from the 
first input/output apparatus GOD and outputs the information to 
the authentication unit 202D. Also, the input/output unit 204D 
5 receives information from the authentication unit 202D and outputs 
the information to the first input/output apparatus 60D. 
[0239] 

(E) First Input/Output Apparatus 60D 

The construction of the first input/output apparatus 60D 
10 will be described. The first input/output apparatus 60D, as shown 

in Fig. 32, includes an image receiving unit 601D, a display unit 

602D, and an input/output unit 603D. 

The first input/output apparatus 60D is specifically a 

computer system that includes a microprocessor, ROM, RAM and the 
15 like. A computer program is stored in the ROM. The microprocessor 

operates in accordance with the computer program and causes the 

first input/output apparatus 60D to achieve the functions. 

[0240] 

It should be noted here that since the function of the first 
20 input/output apparatus 60D as the sub-unit of the 
intercommunication system is well known, the illustration of the 
construction and description of it as the sub-unit are omitted. 

(a) Image Receiving Unit 601D 

The image receiving unit 601D is, for example, a camera, 
25 and takes an image that is displayed on the second input/output 
apparatus 70D, and outputs the taken image to the user terminal 
20D via the input/output unit 603D. 
[0241] 

(b) Display Unit 602D 



108 



The display unit 602D is, forexample, adisplay, and displays 
an image received from the user terminal 20D via the input/output 
unit 603D. 

(F) Operation of Identity Authentication Process 

5 In regards with the operation of the identity authentication 

process, only differences from Embodiment 1 will be described. 
In this modification, the operation of the card reader 30 is 
performed by the first input/output apparatus 60D and the second 
input/output apparatus 70D. Information is transferred between 
10 the first input/output apparatus 60D and the second input/output 
apparatus 70D as either apparatus uses its image receiving unit 
to take an image of the information displayed on the other 
apparatus . 
[0242] 

15 The user terminal 20D converts information into QR code, 

and outputs the QR code to the authentication card lOD. Also, 
the user terminal 20D receives information from the authentication 
card lOD in the form of QR code, and acquires the original 
information from the received QR code. 

20 Similarly, the authentication card lOD converts information 

into QR code, and outputs the QR code to the user terminal 20D. 
Also, the authentication card lOD receives information from the 
user terminal 20D in the form of QR code, and acquires the original 
information from the received QR code. 

25 [0243] 

(G) Operation of Authentication Process 

In regards with the operation of the identity authentication 

process, only differences from Embodiment 1 will be described. 
In this modification, in step SlOO, an encryption QR code is 
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received from the authentication card lOD, encrypted information 
is generated and acquired from the received encryption QR code. 

(H) Application to Other Embodiments 

Up to now, the identity authentication system ID has been 
5 described centering on the differences from Embodiment 1. The 
transfer of information in the form of QR code used in the identity 
authentication system ID can be applied to Embodiments 2, 3, and 
4, as modifications thereof. 
[0244] 

10 More specifically, the identity authentication systems may 

convert the information that is transferred when a visitor visits 
a residence of a user, and transfer the information in the form 
of QR code. 

The application of this technology to Embodiment 3 as a 
15 modification thereof can be achieved by providing the second 
input/output apparatus with a fingerprint reading unit having 
the same construction as the fingerprint reading unit 310B. 
Similarly, the application of this technology to Embodiment 4 
as a modification thereof can be achieved by providing the second 
20 input/output apparatus with such a fingerprint reading unit. 
[0245] 

6.2 Modification of Authentication Method 

The above-described Embodiments perform an authentication 
by a challenge-response system using a secret key encryption 
25 process. The following will describe an authentication by a 
challenge-response system using another encryption process. 

(I) Using Public Key Encryption Process 

Here, modifications to each Embodiment using a public key 
encryption process will be described. 



[0246] 

<Modif ication of Embodiment 1> 

An identity authentication system using a public key 
encryption process will be described centering on differences 
5 from Embodiment 1. One example of the public key encryption 
process is RSA. The description of RSA is omitted here since 
it is well known. 

The authentication card 10 stores, as a secret key, an 
identity certification key "SKI" in correspondence with a 
10 certification key ID. 
[0247] 

The user terminal 20 stores a plurality of pairs of an identity 
authentication key, which is a public key, and an authentication 
key ID that identifies the identity authentication key. In the 

15 following description, it is presumed that the identity 
certification key "SKI" corresponds to an identity authentication 
key "PKl", which is a public key. 

Upon receiving the detection information and a certification 
key ID from the card reader 30, the user terminal 20 acquires 

20 the identity authentication key "PKl" that has been correlated 
with an authentication key ID that matches the received 
certification key ID. Then, the user terminal 20 generates a 
random number "N", stores the generated random number "N" into 
the random number storage area 250, generates an encrypted 

25 information Enc (PK1,N) by encrypting the random number "N" using 
the acquired identity authentication key "PKl", and outputs the 
generated encrypted information Enc (PK1,N) to the authentication 
card 10 via the card reader 30. 
[0248] 
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Upon receiving the encrypted information Enc(PKl,N) from 
the user terminal 20, the authentication card 10 decrypts the 
received encrypted information Enc(PKl,N) using the stored 
identity certification key "SKI", and outputs the decrypting 
5 result to the user terminal 20 via the card reader 30. 

Upon receiving the decrypting result from the authentication 
card 10, the user terminal 20 judges whether or not the received 
decrypting result matches the stored random number "N" . If it 
judges that the decrypting result matches the random number "N", 

10 the user terminal 20 verifies the authenticity of the 
authentication card inserted in the card reader 30, generates 
the authentic visitor information, and displays the generated 
authentic visitor information. If it judges that the decrypting 
result does not match the random number "N", the user terminal 

15 20 determines that the authentication card inserted in the card 
reader 30 is unauthentic, generates the unauthentic visitor 
information, and displays the generated unauthentic visitor 
information. The user terminal 20 then deletes the random number 
"N" from the randomnumber storage area 250 , and deletes information 

20 and data from the random number storage area 250. 
[0249] 

<Modif ication of Embodiment 2> 

The following description will be provided centering on 
differences from Embodiment 2 . The authentication card lOA stores 
25 in the authentication key storage unit 201A an identity 
certification key "SKI" as a secret key. The user terminal 20A 
stores an identity authentication key "PKl" that is a public key 
having been distributed from the distribution apparatus 50A in 
advance. The operation in the authentication process is as 
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follows. Upon receiving the detection information from the card 
reader 30A, the user terminal 20A acquires the identity 
authentication key "PKl" from the authentication key storage unit 
201A. The user terminal 20A then generates the random number 
5 "N", stores the generated random number "N" into the random number 
storage area 250A, generates an encrypted information Enc (PK1,N) 
by encrypting the generated random number "N" using the acquired 
identity authentication key "PKl", and outputs the generated 
encrypted information Enc(PKl,N) to the authentication card lOA 

10 via the card reader 30A. The description of the operation 
succeeding to this is omitted here since it is the same as has 
been described earlier. It should be noted here that after the 
authentication process is completed, the random number "N" is 
deleted from the random number storage area 250A, and the identity 

15 authentication key "PKl" is deleted from the authentication key 
storage unit 201A. 
[0250] 

<Modif ication of Embodiment 3> 

The following description will be provided centering on 

20 differences from Embodiment 3. In this modification, the ID 
encryption, which allows the public key to be set freely, is used. 
The ID encryption used here is a public key encryption process 
based on the ID information. The following provides a specific 
example of such a case . It is presumed here that the ID information 

25 is information composed of characteristic points of the 
fingerprint pattern . The description of the public key encryption 
process based on the ID information is omitted here since it is 
well known. For details of the public key encryption process 
based on the ID information, refer to A. Shamir, "Identity-Based 
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cryptosystems and signature schemes" (In Advances in 
Cryptology-CRYPTO' 84, Springer-Verlag LNCS 196, 47-53, 1984). 
[0251] 

The identity authentication system IB further includes a 
5 server apparatus to/from which the authentication card lOB is 
attachable and detachable . The server apparatus includes a server 
fingerprint reading unit that operates in the same manner as the 
fingerprint reading unit 310B. The server apparatus, while the 
authentication card lOB is attached to it, uses the server 

10 fingerprint reading unit to read a fingerprint pattern of a visitor 
who holds the authentication card lOB, and generates fingerprint 
information that is composed of characteristic points of the read 
fingerprint pattern . The server apparatus then generates, using 
the generated fingerprint information and an algorithm for 

15 generating a secret key, an identity certification key "SK" as 
a secret key that corresponds to the generated fingerprint 
information, and writes the generated identity certification key 
"SK" into the certification key storage unit lOlB of the 
authentication card lOB. 

20 [0252] 

Upon detection of an insertion of the authentication card 
lOB, the card reader SOB displays the request information, receives 
a fingerprint of the visitor via the fingerprint reading unit 
310B, generates identity authentication fingerprint information 
25 that is composed of characteristic points of the fingerprint 
pattern of the received fingerprint, and outputs the generated 
identity authentication fingerprint information and the detection 
information to the user terminal 20B. 

Upon receiving the identity authentication fingerprint 
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information and the detection information from the card reader 
SOB, the user terminal 20B generates, using the received identity- 
authentication fingerprint information and an algorithm for 
generating a public key, a public key "PK" that corresponds to 
5 the identity authentication fingerprint information, and stores 
the generated public key "PK" into the authentication key storage 
unit 201B. Further, the user terminal 20B generates the random 
number "N", stores the generated random number "N" into the random 
number storage area 250B, generates an encrypted information 

10 Enc(PK,N) by encrypting the generated random number "N" using 
the generated public key "PK", and outputs the generated encrypted 
information Enc (PK,N) to the authentication card lOB via the card 
reader 30B. The description of the operation succeeding to this 
is omitted here since it is the same as has been described earlier. 

15 It should be noted here that after the authentication process 
is completed, the random number "N" is deleted from the random 
number storage area 250B. 
[0253] 

As described above, it is possible to achieve an 
20 authentication method that uses biometrics information and a 

public key encryption process. 

<Modif ication of Embodiment 4> 

The description of this modification is omitted here since 

it is similar to the above-described modification of Embodiment 
25 3. It should be noted here that if an authentication card inserted 

in the card reader 30C is determined to be authentic, the identity 

authentication system IC performs the visit key authentication 

process and after. 

[0254] 
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(2) Using Different Digital Signature for Each Authentication 
Here, modifications to each Embodiment using a different 
digital signature for each authentication will be described. 
<Modif ication of Embodiment 1> 
5 An identity authentication system using a different digital 

signature for each authentication will be described centering 
on differences from Embodiment 1. One example of the digital 
signature is the El Gamal signature on a finite field. The 
description of the El Gamal signature on a finite field is omitted 
10 here since it is well known. 
[0255] 

The authentication card 10 stores, as a secret key, an 
identity certification key "SKI" in correspondence with a 
certification key ID. 

15 The user terminal 20 stores, in the authentication key 

storage unit 201, aplurality of pairs of an identity authentication 
key, which is a public key, and an authentication key ID that 
identifies the identity authentication key. In the following 
description, it is presumed that the identity certification key 

20 "SKI" corresponds to an identity authentication key "PKl", which 
is a public key. 
[0256] 

Upon receiving the detection information and a certification 
key ID from the card reader 30, the user terminal 20 stores the 
25 received certification key ID into the ID storage area 251. The 
user terminal 20 then generates a random number "N", stores the 
generated random number "N" into the random number storage area 
250, and outputs the generated random number "N" to the 
authentication card 10 via the card reader 30. 
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Upon receiving the random number "N" from the user terminal 
20, the authentication card 10 generates a digital signature of 
the received random number "N" using the stored identity 
certification key "SKI", and outputs the generated digital 
5 signature to the user terminal 20 via the card reader 30. 
[0257] 

Upon receiving the digital signature from the authentication 
card 10, the user terminal 20 acquires, from the authentication 
key storage unit 201, an identity authentication key "PKl" that 

10 corresponds to an authentication key ID that matches the 
certification key ID stored in the ID storage area 251. The user 
terminal 20 then performs a signature verification on the received 
digital signature using the acquired identity authentication key 
"PKl" and the random number "N" . Here, the signature verification 

15 is an algorithm for verifying whether or not a digital signature 
is authentic . If it judges that the digital signature is authentic^ 
the user terminal 20 verifies the authenticity of the 
authentication card inserted in the card reader 30, generates 
the authentic visitor information, and displays the generated 

20 authentic visitor information. If it judges that the digital 
signature is not authentic, the user terminal 20 determines that 
the authentication card inserted in the card reader 30 is 
unauthentic, generates the unauthentic visitor information, and 
displays the generated unauthentic visitor information . The user 

25 terminal 20 then deletes the random number "N" from the random 
number storage area 250, and deletes the certification key ID 
from the ID storage area 251. 
[0258] 

<Modif ication of Embodiment 2> 
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The following description will be provided centering on 
differences from Embodiment 2 . The authentication card lOA stores 
in the authentication key storage unit 201A an identity 
certification key "SKI" as a secret key. The user terminal 20A 
5 stores an identity authentication key "PKl" that is a public key 
having been distributed from the distribution apparatus 50A in 
advance. The operation in the authentication process is as 
follows. Upon receiving the detection information from the card 
reader 30A, the user terminal 2 OA generates a random number "N", 
10 stores the generated random number "N" into the random number 
storage area 250A, and outputs the generated random number "N" 
to the authentication card lOA via the card reader 30A. 
[0259] 

Then, similarly to the above-described operation, the 
15 authentication card lOA generates a digital signature of the 
received random number "N", and outputs the generated digital 
signature to the user terminal 20A. The user terminal 20A performs 
a signature verification on the received digital signature using 
an identity authentication key "PKl", which has been distributed 
20 in advance, and the random number "N" . The description of the 
operation succeeding to this is omitted here since it is the same 
as has been described earlier. It should be noted here that after 
the authentication process is completed, the random number "N" 
is deleted from the random number storage area 250A, and the 
25 identity authentication key "PKl" is deleted from the 
authentication key storage unit 201A. 
[0260] 

<Modif ication of Embodiment 3> 

The following description will be provided centering on 
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differences from Embodiment 3. In this modification, the ID 
signature, which allows the public key to be set freely, is used. 
The ID signature used here is a digital signature method based 
on the ID information . It is presumed here that the ID information 
5 is information composed of characteristic points of the 
fingerprint pattern. The description of the ID signature is 
omittedhere since it is well known . For details of the ID signature, 
refer to A. Shamir, "Identity-Based cryptosystems and signature 
schemes" (In Advances in Cryptology-CRYPTO' 84 , Springer-Verlag 
10 LNCS 196, 47-53, 1984) . 
[0261] 

The following provides a specific example of a case where 
the ID signature is used. 

The identity authentication system IB further includes a 

15 server apparatus to/from which the authentication card lOB is 
attachable and detachable . The server apparatus includes a server 
fingerprint reading unit that operates in the same manner as the 
fingerprint reading unit 310B. The server apparatus, while the 
authentication card lOB is attached to it, uses the server 

20 fingerprint reading unit to read a fingerprint pattern of a visitor 
who holds the authentication card lOB, and generates fingerprint 
information that is composed of characteristic points of the read 
fingerprint pattern. The server apparatus then generates, using 
the generated fingerprint information and an algorithm for 

25 generating a secret key, an identity certification key "SK" as 
a secret key that corresponds to the generated fingerprint 
information, and writes the generated identity certification key 
"SK" into the certification key storage unit lOlB of the 
authentication card lOB. 
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[0262] 

Upon detection of an insertion of the authentication card 
lOB, the card reader SOB displays the request information, receives 
a fingerprint of the visitor via the fingerprint reading unit 
5 310B, generates identity authentication fingerprint information 
that is composed of characteristic points of the fingerprint 
pattern of the received fingerprint, and outputs the generated 
identity authentication fingerprint information and the detection 
information to the user terminal 20B. 

10 Upon receiving the identity authentication fingerprint 

information and the detection information from the card reader 
SOB, the user terminal 20B writes the received identity 
authentication fingerprint information into the authentication 
key storage unit 201B. The user terminal 20B then generates a 

15 random number "N", outputs the generated random number "N" to 
the authentication card lOB via the card reader SOB, and stores 
the generated random number "N" into the random number storage 
area 250B. 
[026S] 

20 Upon receiving the random number "N" from the user terminal 

20, the authentication card 10 generates a digital signature of 
the received random number "N" using the stored identity 

certification key "SKI", and outputs the generated digital 
signature to the user terminal 20 via the card reader 30. 
25 Upon receiving the digital signature from the authentication 

card lOB, the user terminal 20B acquires, from the authentication 
key storage unit 201B, the identity authentication fingerprint 
information, and generates, using the acquired identity 
authentication fingerprint information and an algorithm for 
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generating a public key, a public key "PK" that corresponds to 
the identity authentication fingerprint information. The user 
terminal 20B then performs a signature verification on the received 
digital signature using the generated identity authentication 
5 key "PK" and the random number "N" . 
[0264] 

The description of the operation succeeding to this is 
omitted here since it is the same as has been described earlier. 
<Modif ication of Embodiment 4> 

10 The description of this modification is omitted here since 

it is similar to the above-described modification of Embodiment 
3 . It should be noted here that if an authentication card inserted 
in the card reader 30C is determined to be authentic, the identity 
authentication system IC performs the visit key authentication 

15 process and after. 
[0265] 

(3) Using Fixed Digital Signature 

Here, modifications to each Embodiment using a fixed digital 
signature will be described. 
20 <Modif ication of Embodiment 1> 

An identity authentication system using a fixed digital 
signature will be described centering on differences from 
Embodiment 1. One example of the digital signature is the El 
Gamal signature on a finite field. The description of the El 
25 Gamal signature on a finite field is omitted here since it is 
well known. 
[0266] 

The identity authentication system 1 further includes a 
server apparatus to/from which the authentication card 10 is 
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attachable and detachable. The server apparatus stores, in 
correspondence with a certification key ID, a secret key "SK" 
that is used to generate a digital signature as an identity 
certification key. The authentication card 10 stores an 
5 identifier "ID" for identifying the authentication card 10, 
instead of storing a certification key ID and an identity 
certification key. 

The user terminal 20 stores, in the authentication key 
storage unit 201, a public key "PK" as an identity authentication 
10 key in correspondence with an authentication key ID, instead of 
storing an authentication key ID and an identity authentication 
key. 
[0267] 

The server apparatus, while the authentication card 10 is 
15 attached to it, acquires the identifier "ID" stored in the 
authentication card 10, generates a digital signature of the 
acquired identifier "ID" using the stored secret key "SK", and 
writes into the authentication card 10 the generated digital 
signature and a certification key ID that corresponds to the secret 
20 key "SK". 

Upon detection of an insertion of the authentication card 
10, the card reader 30 reads the digital signature, the 
certification key ID, and the identifier "ID" from the 
authentication card 10, and outputs the read digital signature, 
25 certification key ID, and identifier "ID" to the user terminal 
20. 

[0268] 

Upon receiving the digital signature, certification key 
ID, and identifier "ID", the user terminal 20 acquires, from the 



authentication key storage unit 201, a public key "PK" that 
corresponds to an authentication key ID that matches the received 
certification key ID, and performs a signature verification on 
the received digital signature using the acquired public key "PK" 
5 and the received identifier "ID". Here, the signature 
verification is an algorithm for verifying whether or not a digital 
signature is authentic. If it judges that the digital signature 
is authentic, the user terminal 20 verifies the authenticity of 
the authentication card inserted in the card reader 30, generates 

10 the authentic visitor information, and displays the generated 
authentic visitor information. If it judges that the digital 
signature is not authentic, the user terminal 20 determines that 
the authentication card inserted in the card reader 30 is 
unauthentic, generates the unauthentic visitor information, and 

15 displays the generated unauthentic visitor information. 
[0269] 

<Modif ication of Embodiment 2> 

The following description will be provided centering on 
differences from Embodiment 2. The identity authentication 

20 system lA further includes a server apparatus that operates in 
the same manner as described above. The distribution apparatus 
50A stores a public key "PK" and distributes it to the user terminal 
20A, instead of storing an identity authentication key and 
distributing it to the user terminal 20A. The authentication 

25 card lOA stores an identifier "ID" for identifying the 
authentication card lOA, instead of storing an identity 
certification key. The user terminal 20A stores the public key 
"PK" that is distributed from the distribution apparatus 50A in 
advance, instead of storing the identity authentication key that 
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is distributed from the distribution apparatus 50A in advance. 
[0270] 

The description of the operation is omitted here since it 
is the same as described above. It should be noted here that 
5 the distribution apparatus 50A and the server apparatus may be 
a same apparatus . 
<Modif ication of Embodiment 3> 

The following description will be provided centering on 
differences from Embodiment 3. In this modification, the ID 
10 signature, which allows the public key to be set freely, is used. 
The ID signature used here is a digital signature method based 
on the ID information . It is presumed here that the ID information 
is information composed of characteristic points of the 
fingerprint pattern. The following provides a specific example 
15 of a case where the ID signature is used. 
[0271] 

The identity authentication system IB further includes a 
server apparatus to/from which the authentication card lOB is 
attachable and detachable . The server apparatus includes a server 

20 fingerprint reading unit that operates in the same manner as the 
fingerprint reading unit 310B . The authentication card 1 OB stores 
an identifier "ID" for identifying the authentication card lOB, 
instead of storing a certification key ID and an identity 
certification key. 

25 The server apparatus, while the authentication card lOB 

is attached to it, uses the server fingerprint reading unit to 
read a fingerprint pattern of a visitor who holds the authentication 
card lOB, and generates fingerprint information that is composed 
of characteristic points of the read fingerprint pattern. The 
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server apparatus then generates, using the generated fingerprint 
information and an algorithm for generating a secret key, a secret 
key "SK" that corresponds to the generated fingerprint information 
The server apparatus further acquires the identifier "ID" from 
5 the authentication card lOB, generates a digital signature of 
the acquired identifier "ID" using the generated secret key "SK", 
and writes the generated digital signature into the authentication 
card lOB. 
[0272] 

10 Upon detection of an insertion of the authentication card 

lOB, the card reader 30B displays the request information, receives 
a fingerprint of the visitor via the fingerprint reading unit 
310B, and generates identity authentication fingerprint 
information that is composed of characteristic points of the 

15 fingerprint pattern of the received fingerprint . The card reader 
30B further reads the digital signature and the identifier "ID" 
from the authentication card lOB, and outputs the read digital 
signature and identifier "ID", and the generated identity 
authentication fingerprint information to the user terminal 20B. 

20 [0273] 

Upon receiving the digital signature, identifier "ID", and 
identity authentication fingerprint information from the card 
reader 30B, the user terminal 20B generates a public key "PK" 
that corresponds to the identity authentication fingerprint 
25 information, using the received identity authentication 
fingerprint information and an algorithm for generating a public 
key . The user terminal 20B then performs a signature verification 
on the received digital signature using the generated public key 
"PK" and the received identifier "ID". The description of the 
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operation succeeding to this is omitted here since it is the same 
as described above. 

[0274] 

<Modif ication of Embodiment 4> 
5 The description of this modification is omitted here since 

it is similar to the above-described modification of Embodiment 
3 . It should be noted here that if an authentication card inserted 
in the card reader 30C is determined to be authentic, the identity 
authentication system IC performs the visit key authentication 

10 process and after. 

(4) Using Secret Key and One-Way Function 

First, the one-way function will be described. The one-way 
function is a function that outputs a secret key that is different 
from an input secret key, and does not generate the input secret 

15 key from the output secret key. The one-way function always 
outputs a same value in so far as a same value is input. 
[0275] 

<Modif ication of Embodiment 1> 

An identity authentication system using a secret key and 
20 a one-way function will be described centering on differences 
from Embodiment 1. 

The authentication card 10 stores, in correspondence with 
a certification key ID, a certification secret key "f_l(SKl)" 
that is generated by executing a one-way function "f_l" on an 
25 identity certification key "SKI". 
[0276] 

The user terminal 20 includes a key information table T500, 
an example of which is shown in Fig. 33. The key information 
table T500 stores a plurality of sets of an identity authentication 



key, an authentication key ID for identifying the identity 
authentication key, and a one-way function. The description of 
the identity authentication key and the authentication key ID 
is omitted here since they are the same as those described in 
5 Embodiment 1 . The one-way function is a function that generates, 
from a corresponding identity authentication key, an 
authentication secret key that is required in an authentication 
of the authentication card 10. 
[0277] 

10 Upon receiving the detection information and a certification 

key ID from the card reader 30, the user terminal 20 acquires 
a one-way function and an identity authentication key that 
corresponds to an authentication key ID that matches the 
certification key ID. The user terminal 20 then generates an 

15 authentication secret key by executing the acquired one-way 
function on the acquired identity authentication key, and 
temporarily stores the generated authentication secret key. The 
user terminal 20 then generates a random number "N", stores the 
generated random number "N" into the random number storage area 

20 250, and outputs the generated random number "N" to the 
authentication card 10 via the card reader 30. 
[0278] 

Upon receiving the random number "N" from the user terminal 
20, the authentication card 10 generates encrypted information 
25 Enc (f_l (SKI) , N) by encrypting the received random number "N" using 
the stored certification secret key "f_l(SKl)". The 
authentication card 10 outputs the generated encrypted 
information Enc (f_l (SKI) ,N) to the user terminal 20 via the card 
reader 30. 
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[0279] 

Upon receiving the encrypted information Enc(f_l(SKl) ,N) 
from the authentication card 10, the user terminal 20 decrypts 
the received encrypted information Enc (f_l (SKI) , N) using the 
5 temporarily stored authentication secret key, and judges whether 
or not the decrypting result matches the random number '*'*N" stored 
in the random number storage area 250. 

The description of the operation succeeding to this is 
omitted here since it is the same as has been described in Embodiment 
10 1. 

[0280] 

In this modification, the user terminal 20 generates the 
authentication secret key before the random number is generated. 
However, not limited to this, the user terminal 20 may generate 
15 the authentication secret key after it receives the encrypted 
information . 

<Modif ication of Embodiment 2> 

The following description will be provided centering on 
differences from Embodiment 2 . The authentication card lOA stores 

20 a certification secret key "f_l(SKl)" in the authentication key 
storage unit 201A. The user terminal 20A stores a one-way function 
and a secret key that has been distributed from the distribution 
apparatus 50A in advance. The operation in the authentication 
process will be described. Upon receiving the detection 

25 information from the card reader 30A, the user terminal 20A 
generates an authentication secret key by executing the stored 
one-way function on the stored secret key, and temporarily stores 
the generated authentication secret key. The user terminal 20A 
then generates a random number "N", outputs the generated random 



number "N" to the card reader 30A via the input/output unit 204A, 
and stores the generated random number "N" into the random number 

storage area 250A. 
[0281] 

5 Upon receiving the random number "N" from the user terminal 

20A, the authentication card lOA generates encrypted information 
Enc (f_l (SKI) , N) by encrypting the received random number "N" using 
the stored certification secret key "f_l(SKl)". The 
authentication card lOA outputs the generated encrypted 
10 information Enc (f_l (SKI) , N) to the user terminal 20A via the card 
reader 30A. 
[0282] 

Upon receiving the encrypted information Enc ( f_l ( SKI ) , N) 
from the card reader 30A, the user terminal 20A decrypts the 
15 received encrypted information Enc(f_l (SKI) ,N) using the stored 
authentication secret key, and judges whether or not the decrypting 
result matches the random number "N" stored in the random number 
storage area 250A. 

The description of the operation succeeding to this is 
20 omitted here since it is the same as has been described in Embodiment 
2. 

[0283] 

In this modification, the user terminal 20A generates the 
authentication secret key before the random number is generated. 
25 However, not limited to this, the user terminal 20A may generate 
the authentication secret key after it receives the encrypted 
information . 

<Modif ication of Embodiment 3> 

The following description will be provided centering on 
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differences from Embodiment 3. 
[0284] 

The authentication card lOB stores a certification secret 
key "f_l (SKI) " that is generated by executing a one-way function 
5 "f_l" on a piece of identity certification fingerprint information 
(that is to say, an identity certification key "SKI") that 
corresponds to a visitor. The authentication card lOB stores 
the certification secret key "f_l(SKl)" in correspondence with 
a certification function ID (for example, "ID_1") for identifying 

10 a one-way function used to generate the certification secret key. 

Also, the user terminal 20B includes an information table 
T600, an example of which is shown in Fig. 34. The information 
table T600 stores a plurality of pairs of a one-way function and 
an authentication function ID for identifying the one-way function 

15 The one-way function is a function that generates an authentication 
secret key that is required in an authentication of the 
authentication card lOB. The authentication function ID is an 
identifier for identifying a one-way function, and is identical 
with a certification function ID. With this arrangement, it is 

20 possible to correlate a one-way function used to generate a 
certification function ID with a one-way function stored in the 
information table. 
[0285] 

Upon detection of an insertion of the authentication card 
25 lOB, the card reader 30B displays the request information, receives 
a fingerprint of the visitor via the fingerprint reading unit 
310B, generates identity authentication fingerprint information 

that is composed of characteristic points of the fingerprint 
pattern of the received fingerprint, and outputs the generated 
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identity authentication fingerprint information and the detection 
information to the user terminal 20B. 

Upon receiving the identity authentication fingerprint 
information and the detection information from the card reader 
5 SOB, the user terminal 20B writes the received identity 
authentication fingerprint information into the authentication 
key storage unit 201B. Then, the authentication unit 202B 
generates the random number "N", outputs the generated random 
number "N" to the card reader SOB via the input/output unit 2 04B, 
10 and stores the generated random number "N" into the random number 
storage area 250B. 
[0286] 

Upon receiving the random number "N" from the user terminal 
20B, the authentication card lOB generates encrypted information 

15 Enc (f_l (SKI) , N) by encrypting the received random number "N" using 
the stored certification secret key "f_l(SKl)". The 
authentication card lOB outputs the generated encrypted 
information Enc (f_l (SKI) ,N) and the certification key ID "ID_1" 
to the user terminal 20B via the card reader SOB. 

20 [0287] 

Upon receiving the encrypted information Enc (f_l (SKI) ,N) 
and the certification key ID "ID_1" from the card reader SOB via 

the input/ output unit 204B, the user terminal 20B acquires a one-way 
function that corresponds to an authentication ID that matches 
25 a certification key ID. The user terminal 20B generates an 
authentication secret key by executing the acquired one-way 
function on the stored identity authentication fingerprint 
information, decrypts the received encrypted information 
Enc (f_l (SKI) , N) using the generated authentication secret key. 
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and judges whether or not the decrypting result matches the random 
number "N" stored in the random number storage area 250B. 
[0288] 

The description of the operation succeeding to this is 
5 omitted here since it is the same as has been described in Embodiment 
3. 

In this modification, the user terminal 20B generates the 
authentication secret key after it receives the encrypted 
information. However, not limited to this, the user terminal 

10 20B may acquire a certification key ID from the authentication 
card lOB before generating a random number, and generate an 
authentication secret key using a one-way function that 
corresponds to an authentication key ID that matches the acquired 
certification key ID. 

15 [0289] 

<Modif ication of Embodiment 4> 

The description of this modification is omitted here since 
it is similar to the above-described modification of Embodiment 
3. 

20 (5) Using Public Key Certificate 

First, the public key certificate will be described. The 
public key certificate is a proof of validity for a public key 
generated by, for example, the home-visit company, and is issued 
by a Certificate Authority (CA) , which is a third party. 

25 [0290] 

The public key certificate includes a public key generated 
by the home-visit company, an ID of the public key certificate, 

and a certificate signature that is a signature of the CA for 
these items. Here, the certificate signature is signature data 



that is generated by performing a digital signing using a secret 
key (SK_CA) that is held only by the CA. One example of the digital 
signing is a digital signing that uses the Rivest Shamir Adleman 
(RSA) in which a hash function is used. 
5 [0291] 

The following describes an identity authentication system 
1000 that uses the public key certificate. 

The identity authentication system 1000 is composed of an 
authentication card 1010, a user terminal 1020, and a card reader 
10 1030. 

(a) Authentication card 1010 

The construction of the authentication card 1010 will be 
described. The authentication card 1010 is a portable recording 
medium in which an IC is embedded. One specific example of the 
15 authentication card 1010 is a memory card having an IC card function . 
As shown in Fig. 35, the authentication card 1010 is composed 
of a secret key storage unit 1101, a certificate storage unit 
1102, a control unit 1103, and an input/output unit 1104. 
[0292] 

20 The authentication card 1010 is specifically a computer 

system that includes a microprocessor, ROM, RAM and the like. 
A computer program is stored in the ROM. The microprocessor 

operates in accordance with the computer program and causes the 
authentication card 1010 to achieve the functions. 
25 (Secret Key Storage Unit 1101) 

The secret key storage unit 1101 is tamper-resistant, and 

stores a secret key. The secret key stored here is a key that 

is unique to the home-visit company. The secret key is used to 
verify the authenticity of the authentication card 1010 itself. 
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and is managed securely by the home-visit company. 
[0293] 

In the following description, a secret key "SKI" is used 
as necessary. 
5 (Certificate Storage Unit 1102) 

The certificate storage unit 1102 stores a public key 
certificate that shows the authenticity of a public key "PKl" 
that corresponds to the secret key "SKI" stored in the secret 
key storage unit 1101. 
10 (Control Unit 1103) 

The control unit 1103, upon receiving, from the card reader 
1030 via the input/output unit 1104, certificate request 
information that requests a public key certificate, acquires a 
public key certificate from the certificate storage unit 1102, 
15 and outputs the acquired public key certificate to the card reader 
1030 via the input/output unit 1104. 
[0294] 

Further, upon receiving encrypted information Enc(PKl,N) , 
which has been generated by encrypting a random number "N" using 

20 the public key "PKl", from the user terminal 1020 via the card 
reader 1030, the control unit 1103 acquires the secret key "SKI" 
from the secret key storage unit 1101, and decrypts the received 
encrypted information Enc(PKl,N) using the acquired secret key 
"SKI". The control unit 1103 outputs the decrypting result to 

25 the card reader 1030 via the input/output unit 1104. 
[0295] 

(Input/Output Unit 1104) 

The input/output unit 1104 receives information from the 
card reader 1030 and outputs the information to the control unit 
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1103 . Also, the input/output unit 1104 receives information from 
the control unit 1103 and outputs the information to the card 
reader 1030. 

(b) Construction of User Terminal 1020 
5 The construction of the user terminal 1020 will be described. 

The user terminal 1020 authenticates the authentication card 1010 
inserted in the card reader 1030. As shown in Fig. 36, the user 
terminal 1020 includes a CA public key storage unit 1201, an 
authentication unit 1202, a display unit 1203, and an input/output 
10 unit 1204. 
[0296] 

The user terminal 1020 is specifically a computer system 
that includes a microprocessor, ROM, RAM, a hard disk unit, a 
display unit and the like. A computer program is stored in the 
15 ROM or the hard disk unit. The microprocessor operates in 
accordance with the computer program and causes the user terminal 
1020 to achieve the functions. 
[0297] 

(CA Public key Storage Unit 1201) 
20 The CA public key storage unit 1201 is tamper-resistant, 

and stores a public key (PK_CA) that corresponds to the secret 

key (SK_CA) that is held only by the CA. 

(Authentication Unit 1202) 

The authentication unit 1202 includes: a random number 
25 storage area 1250 for storing random numbers; and a certificate 

storage area 1251 for storing public key certificates. 

[0298] 

The authentication unit 1202 receives, from the card reader 
1030 via the input/output unit 1204, (i) detection information 
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that indicates detection of an insertion of the authentication 
card 1010 into the card reader 1030, and (ii) a public key 
certificate stored in the authentication card 1010. 

The authentication unit 1202 reads the public key (PK_CA) 
5 from the CA public key storage unit 1201, and performs a signature 
verification on the certificate signature contained in the 
received public key certificate, using the readpublic key (PK_CA) . 
If it judges, from the result of the signature verification, that 
the received public key certificate is authentic, the 
10 authentication unit 1202 stores the received public key 
certificate in the certificate storage area 1251. 
[0299] 

The authentication unit 1202 generates a random number "N", 
and stores the generated random number "N" in the random number 

15 storage area 1250. 

The authentication unit 1202 acquires the public key "PKl" 
that is contained in the public key certificate stored in the 
certificate storage area 1251, generates encrypted information 
Enc(PKl,N) by encrypting the generated random number "N" using 

20 the acquired public key "PKl", and outputs the generated encrypted 
information Enc (PKl, N) to the card reader 1030 via the input /output 
unit 1204. 
[0300] 

Further, the authentication unit 1202 receives a decrypting 
25 result of encrypted information Enc (SKI, N) from the card reader 
1030 via the input/output unit 1204, and judges whether or not 
the decrypting result matches the random number "N" stored in 
the random number storage area 1250. 

If the decrypting result matches the random number "N", 



136 



the authentication unit 1202 verifies the authenticity of the 
authentication card inserted in the card reader 1030, and as the 
authentication result, the authentication unit 1202 generates 
authentic visitor information that indicates that the visitor 
5 is an authentic visitor, and outputs the generated authentic 
visitor information to the display unit 1203. If the decrypting 
result does not match the random number "N", the authentication 
unit 1202 determines that the authentication card inserted in 
the card reader 1030 is unauthentic, and as the authentication 

10 result, generates unauthentic visitor information that indicates 
that the visitor is an unauthentic visitor, and outputs the 
generated unauthentic visitor information to the display unit 
1203. Further, the authentication unit 1202 deletes the random 
number "N" from the random number storage area 1250, and deletes 

15 the public key certificate from the certificate storage area 1251 . 
[0301] 

Also, if it judges that the received public key certificate 
is not authentic, then the authentication unit 1202 generates 
the unauthentic visitor information, outputs the generated 
20 unauthentic visitor information to the display unit 1203, and 
ends the operation. 
(Display Unit 1203) 

The display unit 1203 is providedwith, for example, adisplay, 
and displays information of the authentication result received 
25 from the authentication unit 1202, toward outside. 
[0302] 

(Input/Output Unit 1204) 

The input/output unit 1204 receives information from the 
card reader 1030 and outputs the information to the authentication 
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unit 1202 . Also, the input/output unit 1204 receives information 
from the authentication unit 1202 and outputs the information 
to the card reader 1030. 
(c) Card Reader 1030 
5 The card reader 1030, as shown in Fig. 36, includes a card 

reading unit 1301 and an input/output unit 1302. 
[0303] 

The card reader 1030 is specifically a computer system that 
includes a microprocessor, ROM, RAM and the like. A computer 

10 program is stored in the ROM. The microprocessor operates in 
accordance with the computer program and causes the card reader 
1030 to achieve the functions. 
(Card Reading Unit 1301) 

The card reading unit 1301 detects an insertion of the 

15 authentication card 1010. Upon detecting the insertion of the 
authentication card 1010, the card reading unit 1301 generates 
the detection information and the certificate request inf ormation^ 
and outputs the generated certificate request information to the 
authentication card 1010 . Upon receiving a public key certificate 

20 from the authentication card 1010, the card reading unit 1301 
outputs the received public key certificate and the generated 
detection information to the user terminal 1020 via the 
input/output unit 1302. 
[0304] 

25 Further, upon receiving the random number "N" from the user 

terminal 1020 via the input/output unit 1302, the card reading 
unit 1301 outputs the received random number "N" to the 

authentication card 1010. Upon receiving the encrypted 
information Enc(SKl,N) from the authentication card 1010, the 
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card reading unit 1301 outputs the received encrypted information 
Enc(SKl,N) to the user terminal 1020 via the input/output unit 
1302 . 
[0305] 

5 (Input/Output Unit 1302) 

The input/output unit 1302 receives information from the 
user terminal 1020 and outputs the information to the card reading 
unit 1301 . Also, the input/output unit 1302 receives information 
from the card reading unit 1301 and outputs the information to 
10 the user terminal 1020. 

(d) Operation of Identity Authentication Process 

The identity authentication process is a process in which 
after the authentication card 1010 is inserted into the card reader 
1030, the user terminal 1020 authenticates the identity. The 
15 identity authentication process will be described with reference 
to the flowchart shown in Fig. 37. 
[0306] 

When the card reader 1030 detects an insertion of the 

authentication card 1010 (step SIOOO) , the card reader 1030 
20 generates the detection information and the certificate request 

information, and outputs the generated certificate request 

information to the authentication card 1010 (step S1005) . 

Upon receiving the certificate request information from 

the card reader 1030, the authentication card 1010 acquires the 
25 public key certificate stored in the certificate storage unit 

1102, and outputs the acquired public key certificate to the card 

reader 1030 (step SlOlO) . 

[0307] 

Upon receiving the public key certificate from the 



139 



authentication card 1010 (stepSlOlS), the card reader 1030 outputs 
the received public key certificate and the detection information 
generated in step S1005 to the user terminal 1020 (step S1020) . 
Upon receiving the public key certificate and detection 
5 information from the card reader 1030, the user terminal 1020 
performs an examination process to j udge whether or not the received 
public key certificate is authentic (step S1025) . Then, if the 
received public key certificate is authentic, the user terminal 
1020 generates the random number "N" and stores the generated 

10 random number "N" in the random number storage area 1250 (step 
S1030) . The user terminal 1020 then acquires the public key ""PKl" 
that is contained in the public key certificate (step S1035) , 
generates encrypted information Enc(PKl,N) by encrypting the 
generated random number "N", and outputs the generated encrypted 

15 information Enc(PKl,N) to the card reader 1030 (step S1040) . 
[0308] 

Upon receiving the encrypted information Enc(PKl,N) from 
the user terminal 1020, the card reader 1030 outputs the received 
encrypted information Enc (PK1,N) to the authentication card 1010 

20 (step S1045) . 

Upon receiving the encrypted information Enc(PKl,N) from 
the card reader 1030, the authentication card 1010 decrypts the 
received encrypted information Enc(PKl,N) using the secret key 
"SKI" stored in the secret key storage unit 1101, and outputs 

25 the decrypting result to the card reader 1030 (step S1050) . 
[0309] 

Upon receiving the decrypting result from the authentication 
card 1010, the card reader 1030 outputs the received decrypting 
result to the user terminal 1020 (step S1055) . 
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Upon receiving the decrypting result from the card reader 
1030, the user terminal 1020 performs an authentication process 
using the received decrypting result and the random number "N" 
stored in the random number storage area 1250 (step S1060) . 
5 [0310] 

(e) Examination Process 

Here, the examination process that is executed in step S1025 
of the identity authentication process will be described with 
reference to the flowchart shown in Fig. 38. 

10 The authentication unit 1202 of the user terminal 1020 

receives, from the card reader 1030, the detection information 
and the public key certificate stored in the authentication card 
1010 (step SHOO) . The authentication unit 1202 then acquires 
the public key (PK_CA) from the CA public key storage unit 1201 

15 (step S1105) . 
[0311] 

The authentication unit 1202 performs a signature 
verification on the certificate signature contained in the 
received public key certificate, using the acquired public key 

20 (PK_CA) (stepSlllO). The authentication unit 1202 judges, based 
on the result of the signature verification, whether or not the 
received public key certificate is authentic (step S1115) . 

If it judges that the received public key certificate is 
authentic (YES in step S1115) , the authentication unit 1202 stores 

25 the received public key certificate in the certificate storage 
area 1251 (step S1120) , and performs step S1030 and after shown 
in Fig. 37. 
[0312] 

If it judges that the received public key certificate is 
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not authentic (NO in step S1115) , the authentication unit 1202 
generates the unauthentic visitor information, displays the 
generated unauthentic visitor information (step S1125) , and ends 
the process. 
5 (f) Authentication Process 

Here, the authentication process that is executed in step 
S1060 of the identity authentication process will be described 
with reference to the flowchart shown in Fig. 39. 
[0313] 

10 The authentication unit 1202 of the user terminal 1020 

receives, from the authentication card 1010 via the card reader 
1030, the decrypting result of the encrypted information (step 
S1200) . 

The user terminal 1020 then judges whether or not the 
15 decrypting result matches the random number "N" stored in the 
random number storage area 1250 (step S1205) . 

If it judges that the decrypting result matches the random 
number "N" (YES in step S1205) , the user terminal 1020 generates 
authentic visitor information and displays the generated 
20 authentic visitor information (step S1210) , deletes the random 
number "N" from the random number storage area 1250 and deletes 
the public key certificate from the certificate storage area 1251 
(step S1220), and ends the process. 
[0314] 

25 If it judges that the decrypting result does not match the 

random number "N" (NO in step S1205), the user terminal 1020 
generates unauthentic visitor information and displays the 
generated unauthentic visitor information (step S1215) , deletes 
the random number "N" from the random number storage area 1250 
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and deletes the public key certificate from the certificate storage 
area 1251 (step S1220) , and ends the process. 

6.3 Modification of Identity Authentication System 1000 

The above-described identity authentication system 1000 
5 is an embodiment of the present invention. The present invention 
is not limited to the above-described identity authentication 
system 1000, but may be achieved in various manners within the 
scope of the present invention. The following, for example, 
should be construed as the present invention. 
10 [0315] 

(1) In the above-described identity authentication system 
1000, the user terminal 1020 stores a CA public key (PK_CA) in 
advance. However, as in Embodiment 2, the CA public key may be 
distributed from a distribution apparatus to the user terminal 

15 1020 before a visitor visits the residence of the user. 

(2) In the above-described identity authentication system 
1000, the user terminal 1020 may perform the visit key 
authentication and the visit information authentication. 
Alternatively, the user terminal 1020 may perform either the visit 

20 key authentication or the visit information authentication. 
[0316] 

6.4 Modification of Operation after Authentication 

In the above-described Embodiments, the authentication 
result is displayed on the user terminal. However, the operation 
25 after the authentication is not limited to this. 

For example, if the authentication is successful, the name 
and a facial photo of the visitor may be displayed on the user 
terminal. Alternatively, the name of the sender of an article, 
the name of the article, and a message may be displayed. 



(a) Displaying Name and Facial Photo of Visitor 

Here, a modification in which the name and facial photo 
of the visitor are displayed will be described using Embodiment 
1. 

5 [0317] 

The authentication card 10 includes, in addition to the 
construction shown in Embodiment 1, a visitor information storage 
unit for storing visitor information that includes data of the 
name and facial photo of the visitor. 

10 When the authentication card 10 outputs the encrypted 

information to the user terminal 20, the authentication card 10 
also outputs the visitor information stored in the visitor 
information storage unit. 

Upon receiving the encrypted information and the visitor 

15 information from the authentication card 10, the authentication 
unit 202 of the user terminal 20 temporarily stores the received 
visitor information, and performs the authentication process 
using the received encrypted information. 
[0318] 

20 If the authentication in the authentication process is 

successful, the authentication unit 202, instead of generating 
the authentic visitor information, acquires the temporarily 
stored visitor information, generates an image of the facial photo 
based on the data of the facial photo contained in the acquired 

25 visitor information, and outputs the generated image and the name 
of the visitor contained in the received visitor information to 
the display unit 203. Upon receiving the image of the facial 
photo and the name from the authentication unit 202, the display 
unit 203 displays the received image and name. 
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[0319] 

It should be noted here that displaying the name and facial 
photo of the visitor is applicable to the other embodiments. The 
function can be achieved in each embodiment by providing the 
5 authentication card with the above-described visitor information 
storage unit and allowing the above-described operation to be 
performed similarly. 

Also, the function can be achieved in the identity 
authentication system 1000 in the modifications by providing the 
10 system with the above-described visitor information storage unit 
and allowing the above-described operation to be performed 
similarly. 
[0320] 

It should be noted here that the items that are displayed 
15 when the authentication is successful may be either the name of 
the visitor or the facial photo of the visitor. 

Also, in the above description, the authentication card 
10 outputs the visitor information to the user terminal 20 with 
the timing when it outputs the encrypted information. However, 
20 not limited to this, the authentication card 10 may output the 
visitor information to the user terminal 20 if the user terminal 
20 succeeds in the authentication, for example. 
[0321] 

In this case, upon a success of an authentication, the user 
25 terminal 20 outputs request information, which requests the 
visitor information, to the authentication card 10 via the card 
reader 30, and upon receiving the request information, the 

authentication card 10 acquires the visitor information from the 
visitor information storage unit, and outputs the acquired visitor 
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information to the user terminal 20 via the card reader 30. 

With such a construction, if the authentication succeeds, 
the name or facial photo of the visitor is displayed. This enhances 
the security because the user can confirm the face of the visitor 
5 or the name written in the name tag of the visitor through a peephole 
of the entrance door. 
[0322] 

(b) Displaying Sender's Name, Article's Name, and Message 

Here, a modification in which the name of the sender of 
10 an article, the name of the article, and a message are displayed 
will be described using Embodiment 1 . 

The authentication card 10 includes, in addition to the 
construction shown in Embodiment 1, a sender information storage 
unit for storing sender information that includes the name of 
15 the sender, the name of the article, and a message from the sender. 
[0323] 

When the authentication card 10 outputs the encrypted 
information to the user terminal 20, the authentication card 10 
also outputs the sender information stored in the sender 

20 information storage unit. 

Upon receiving the encrypted information and the sender 
information from the authentication card 10, the authentication 
unit 202 of the user terminal 20 temporarily stores the received 
sender information, and performs the authentication process using 

25 the received encrypted information. 
[0324] 

If the authentication in the authentication process is 

successful, the authentication unit 202, instead of generating 
the authentic visitor information, acquires the temporarily 
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stored sender information, and outputs, to the display unit 203, 
the name of the sender of an article, the name of the article, 
and a message contained in the received sender information. The 
display unit 203 displays the name of the sender of the article, 
5 the name of the article, and the message received from the 
authentication unit 202. 

It should be noted here that displaying the name of the 
sender of an article, the name of the article, and a message is 
applicable to the other embodiments . The function can be achieved 
10 in each embodiment by providing the authentication card with the 
above-described sender information storage unit and allowing the 
above-described operation to be performed similarly. 
[0325] 

Also, the function can be achieved in the identity 
15 authentication system 1000 in the modifications by providing the 
system with the above-described sender information storage unit 
and allowing the above-described operation to be performed 
similarly . 

It should be noted here that the items that are displayed 
20 when the authentication is successful may be one or two out of 
the name of the sender of an article, the name of the article, 
and a message. 
[0326] 

Also, in the above description, the authentication card 
25 10 outputs the sender information to the user terminal 20 with 
the timing when it outputs the encrypted information. However, 
not limited to this, the authentication card 10 may output the 
sender information to the user terminal 20 if the user terminal 
20 succeeds in the authentication, for example. 
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In this case, upon a success of an authentication, the user 
terminal 20 outputs request information, which requests the sender 
information, to the authentication card 10 via the card reader 
30, and upon receiving the request information, the authentication 
5 card 10 acquires the sender information from the sender information 
storage unit, and outputs the acquired sender information to the 
user terminal 20 via the card reader 30. 
[0327] 

With such a construction, it is possible to check if the 
10 article has been sent by a stranger or not. 

Also, in addition to the name of the sender of an article, 
the name of the article, and a message, the above-described name 
and facial photo of the visitor may be displayed. 

This can be achieved by providing the authentication card 
15 10 with the visitor information storage unit and the sender 
information storage unit. 
[0328] 

6.5 Other Modifications 

The above-described Embodiments and modifications are only 

20 specif ic examples of the present invention . The present invention 
is not limited to the above-described embodiments and 
modifications, but may be achieved in various manners within the 
scope of the present invention. The following, for example, 
should be construed as the present invention. 

25 (1) In the above-described Embodiments and modifications, 

the challenge-response system is used as the authentication method 
However, not limited to this, other authentication methods may 
be used. 
[0329] 
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For example, one-way authentication may be used. The 
authentication method will be described using Embodiment 1 . 

When inserted in the card reader 30, the authentication 
card 10 generates a random number "N", and generates encrypted 
5 information Enc (SKI, N) by encrypting the generated random number 
"N" using the stored identity certification key "SKI". The 
authentication card 10 then outputs the generated random number 
"N" and encrypted information Enc (SKI, N) to the user terminal 
20 via the card reader 30. 
10 [0330] 

Upon receiving the random number "N" and encrypted 
information Enc (SKI, N) from the authentication card 10 , the user 
terminal 20 decrypts the received encrypted information 
Enc ( SKI, N) using the stored identity authentication key "SKI". 

15 The user terminal 20 then judges whether or not the decrypting 
result matches the random number "N" received from the 
authentication card 10. If it judges that the decrypting result 
matches the random number "N", the user terminal 20 verifies the 
authenticity of the authentication card inserted in the card reader 

20 30, generates the authentic visitor information, and displays 
the generated authentic visitor information. If it judges that 
the decrypting result does not match the random number "N", the 
user terminal 20 determines that the authentication card inserted 
in the card reader 30 is unauthentic, generates the unauthentic 

25 visitor information, and displays the generated unauthentic 
visitor information. 
[0331] 

In the case of Embodiment 2, the authentication card lOA 
operates in the same manner as described above . The user terminal 
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20A receives an identity authentication key from the distribution 
apparatus 50A and stores it in advance, and using the stored 
identity authentication keyandthe random number "N" and encrypted 
information Enc (SKI, N) received from the authentication card lOA, 
5 the user terminal 20A operates in the same manner as described 
above. It should be noted here that the stored identity 
authentication key is deleted after the authentication is 
performed . 
[0332] 

10 In the case of Embodiment 3, the authentication card lOB 

operates in the same manner as described above . The user terminal 
20B operates in the same manner as described above using the random 
number "N" and encrypted information Enc (SKI, N) received from 
the authentication card lOB, andusing the identity authentication 

15 fingerprint information received from the card reader 30B. 

In the case of Embodiment 4, the authentication card IOC 
operates in the same manner as described above . The user terminal 
20C operates in the same manner as described above using the random 
number "N" and encrypted information Enc (SKI, N) received from 

20 the authentication card IOC, andusing the identity authentication 
fingerprint information received from the card reader 30C. 
[0333] 

(2) In the above-described Embodiments and modifications, 
the authentication is performed while the authentication card 
25 is inserted in the card reader. However, not limited to this, 
the authentication may be performed in other manners. 

A sensor unit may be provided on a surface of the card reader, 
and the authentication may be performed by allowing the 
authentication card to be in touch with the sensor unit. 
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Alternatively, a wireless IC tag may be attached to the 
authentication card, and the authentication may be performed while 
the authentication card is not in touch with the sensor unit. 

[0334] 

5 (3) In the above-described Embodiments and modifications, 

the user terminal and the card reader are connected to each other 
via a cable. However, the present invention is not limited to 
this. 

The user terminal and the card reader may be connected to 
10 each other via a wireless communication. 

(4) In the above-described Embodiments and modifications, 
the authentication result is displayed on the user terminal. 
However, the present invention is not limited to this. 
[0335] 

15 The entrance door may be unlocked if it is judged through 

an authentication process that the visitor is authentic. In this 
case, an electronic lock is used to lock or unlock the entrance 
door. The component unit that locks or unlocks the entrance door 
is called an entrance door control unit. If it is judged that 

20 the authentication card inserted in the card reader is authentic, 
the user terminal generates the authentic visitor information 
and outputs the generated authentic visitor information to the 
entrance door control unit; and if it is judged that the 
authentication card inserted in the card reader is unauthentic, 

25 the user terminal generates the unauthentic visitor information 
and outputs the generated unauthentic visitor information to the 
entrance door control unit. Upon receiving information from the 
user terminal, the entrance door control unit judges whether the 
received information is the authentic visitor information or the 
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unauthentic visitor information. If it judges that the received 
information is the authentic visitor information, the entrance 
door control unit unlocks the entrance door; and if it judges 
that the received information is the unauthentic visitor 
5 information, the entrance door control unit does not unlock the 
entrance door. 
[0336] 

As another modification, a release button for releasing 
the lock of the entrance door may be provided on the user terminal . 

10 Inthiscase, if an authentication successfully ends and the release 
button is depressed, the lock of the entrance door is released. 
If the authentication does not successfully end, the lock of the 
entrance door is not released even if the release button is 
depressed. For example, a child might depress the release button 

15 by mistake when only the child stays at home. In such a case, 
however, the lock of the entrance door is not released unless 
an authentication successfully ends. This is an advantageous 
effect . 
[0337] 

20 Further, as another modification, the authentication result 

may be notified to a stationary or mobile phone that is specified 
in advance. The notification method is, for example, an automatic 
message or an e-mail. 

(5) In the above-described modification to the 

25 communication method, the QR code is used. However, other image 
information may be used. For example, a bar code may be used. 

Also, information other than image information may be used 
instead. For example, an optical signal may be used. 
[0338] 
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(6) In the above-described modification to the 
communication method, an information transfer is performed by 
using (i) a display that displays an image and (ii) a camera that 
takes an image displayed on the display. However, not limited 
5 to this, the information transfer may be performed in other ways . 

For example, the first and second input/output apparatuses 
may be provided with an infrared communication function, and may 
transfer information by an infrared communication. In this case, 
an infrared signal is used in the communication. 
10 Alternatively, the first and second input/output 

apparatuses maybe provided with a speaker and a microphone , convert 
the information to be transferred into an audio signal, and perform 
a communication using the converted audio signal. 
[0339] 

15 (7) In the above-described modification to the 

communication method, the first and second input/output 
apparatuses are used for transferring information . However, not 
limited to this, the information transfer may be performed in 
other ways. 

20 For example, the user terminal may be provided with the 

functions of the first input/output apparatus, and the second 
input/output apparatus may be replaced with a camera mobile phone 
to/ from which the authentication card is attachable and detachable . 
In this case, an information transfer is performed using a peephole 

25 of the entrance door. 
[0340] 

(8) In the above-described modification to the 

communication method, the method by which information is output 
from the user terminal 20D to the authentication card lOD and 
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the method by which information is output from the authentication 
card lOD and the second input/output apparatus 70D to the user 
terminal 20D are the same method. However, not limited to this, 
the method by which information is output from the user terminal 
5 20D to the authentication card lOD may be different from the method 
by which information is output from the authentication card lOD 
and the second input/output apparatus 70D to the user terminal 
20D. 
[0341] 

10 Forexample, information may be output from the user terminal 

20D to the authentication card lOD in the form of QR code, and 
information may be output from the authentication card lOD and 
the second input/output apparatus 70D to the user terminal 20D 
in the form of an audio signal. 

15 (9) In the above-described Embodiments and modifications, 

information may be converted into another type of information 
before the information is output from the user terminal to the 
authentication card or when the information is output from the 
authentication card or the card reader to the user terminal. 

20 [0342] 

For example, information may be converted into a QR code, 
and the user terminal may output the information to the 
authentication card in the form of the QR code. In this case, 
upon receiving the information in the form of the QR code from 
25 the user terminal via the card reader, the authentication card 
restores the original information using the received information 
in the form of the QR code . Similarly, information may be converted 
into a QR code, and the authentication card or the card reader 
may output the information to the user terminal in the form of 
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the QR code. In this case, upon receiving the information in 
the form of the QR code from the authentication card via the card 
reader, or upon receiving the information in the form of the QR 
code from the card reader, the user terminal restores the original 
5 information using the received information in the form of the 
QR code. 
[0343] 

In the above-described example, the method by which 
information is output from the user terminal and the method by 

10 which information is output from the authentication card or the 
card reader are the same method (outputting the information in 
the form of QR code) . However, not limited to this, the method 
by which information is output from the user terminal may be 
different from the method by which information is output from 

15 the authentication card or the card reader. 

For example, information maybe output from the user terminal 
in the form of QR code, and information may be output from the 
authentication card or the card reader in the form of an audio 
signal . 

20 [0344] 

(10) In the above-described Embodiments and modifications, 
the control unit is provided in the authentication card . However, 

not limited to this, the control unit may be provided in the card 
reader, not in the authentication card, so as to transfer the 
25 processes performed by the control unit from the authentication 
card to the card reader. 

Also, in the above-described modification to the 
communication method, the control unit may be provided in the 
second input/output apparatus, not in the authentication card. 
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so as to transfer the processes performed by the control unit 
from the authentication card to the second input /output apparatus . 
[0345] 

(11) In the above-described Embodiments and modifications, 
5 the user terminal may be a mobile phone. In this case, the mobile 

phone may be provided with the authentication unit in advance, 
or may download, from an application distribution apparatus which 
the home-visit company has, an application that operates in the 
same manner as the authentication unit, and store the downloaded 
10 application therein. 

Alternatively, the user terminal may be a TV door-phone, 
instead of a unit in the intercommunication system. 
[0346] 

(12) In the above-described Embodiments and modifications, 
15 the authentication card may identify the user terminal. 

In this case, the user terminal stores a terminal ID in 
advance, and the authentication card includes a storage area for 
storing terminal IDs. The user terminal outputs the terminal 
ID it stores in advance to the authentication card if it judges 
20 through an authentication process that the visitor is authentic. 
The authentication card stores the received terminal ID into the 
storage area. 
[0347] 

This arrangement enables the terminal IDs stored in the 
25 storage area of the authentication card as a visit history. 

(13) In the above-described Embodiments and modifications, 
the authentication card may authenticate the user terminal. 

This arrangement enables a proof of delivery to be provided. 
(14) In the above-described Embodiment 1, the identity 
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authentication key stored in the user terminal 20 may be changed, 
or the user terminal 20 may additionally store an identity 
authentication key. 
[0348] 

5 In this case, the identity authentication system 1 further 

includes a distribution apparatus that transmits a pair of an 
authentication ID and an identity authentication key to the user 
terminal 20. Upon receiving the pair of the authentication ID 
and the identity authentication key from the distribution 

10 apparatus, the user terminal 20 judges whether or not the key 
information table TlOO has the same authentication ID as the 
received authentication ID. If it judges that the key information 
table TlOO has the same authentication ID as the received 
authentication ID, the user terminal 20 rewrites an identity 

15 authentication key that has been stored in correspondence with 
the authentication ID with the received identity authentication 
key. If it judges that the key information table TlOO does not 
have the same authentication ID as the received authentication 
ID, the user terminal 20 adds the received pair of the 

20 authentication ID and the identity authentication key as a new 
identity authentication key. 
[0349] 

(15) In the above-described Embodiment 2, the identity 
authentication key may be encrypted before it is distributed. 
25 In this case, the user terminal stores in advance a decryption 
key used to decrypt the encrypted identity authentication key, 
in a tamper-resistant storage area, decrypts the received 
encrypted identity authentication key, and stores the identity 
authentication key obtained through the decrypting into the 
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tamper-resistant authentication key storage area. 
[0350] 

(16) In the above-described Embodiment 2 , the distribution 
apparatus 50A and the user terminal 20A are connected to each 

5 other via the Internet. However, not limited to this, they may 
be connected to each other in a network via a dedicated line. 

(17) In the above-described Embodiment 2, the identity 
authentication key that is distributed from the distribution 
apparatus 50A in advance, and stored, is deleted after the 

10 authentication process. However, not limited to this, other 
methods are available. 
[0351] 

For example, the identity authentication key may be kept 
to be stored, without being deleted. In this case, upon receiving 

15 an identity authentication key from the distribution apparatus 
50A, the user terminal 20A judges whether or not the received 
identity authentication key matches a stored identity 
authentication key. If it judges that the received identity 
authentication key matches a stored identity authentication key, 

20 the user terminal 20A does not rewrite the key; and if it judges 
that the received identity authentication key does not match a 
stored identity authentication key, the user terminal 20A rewrites 
the stored identity authentication key with the received identity 
authentication key. 

25 [0352] 

(18) In the above-described Embodiment 3, as the biometrics 
information used in the authentication, the information 

(hereinafter, fingerprint information) that is composed of 
characteristic points of the fingerprint pattern of the visitor 
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is used. However, not limited to this, other information may- 
be used. 

The biometrics information may be, for example, fingerprint 
information, voiceprint information which indicates 
5 characteristics of the voiceprint of the visitor, iris information 
which indicates characteristics of the iris of the visitor, facial 
outline information which indicates characteristics of the facial 
outline of the visitor, DNA information which indicates 
characteristics of the DNA of the visitor, or any combination 
10 of these types of information. 
[0353] 

When the voiceprint information is used, the card reader 
30B is provided with a voiceprint reading unit that receives a 
voice of the visitor, and generates, from the received voice, 

15 identity authentication voiceprint information that indicates 
characteristics of the visitor' s voiceprint. On the other hand, 
the authentication card lOB stores identity certification 
voiceprint information that indicates characteristics of the 
visitor's voiceprint, in advance. 

20 When the iris information is used, the card reader 30B is 

provided with an iris reading unit that reads an iris of the visitor, 
and generates, from the read iris, identity authentication iris 
information that indicates characteristics of the visitor' s iris . 
On the other hand, the authentication card lOB stores identity 

25 certification iris information that indicates characteristics 
of the visitor's iris, in advance. 
[0354] 

When the facial outline information is used, the card reader 
30B is provided with a facial outline reading unit that reads 



a facial outline of the visitor, and generates, from the read 
facial outline, identity authentication facial outline 
information that indicates characteristics of the visitor' s 
facial outline. On the other hand, the authentication card lOB 
5 stores identity certification facial outline information that 
indicates characteristics of the visitor's facial outline, in 
advance . 

When the DNA information is used, the card reader 30B is 
provided with a DNA reading unit that receives identity 

10 authentication DNA information that is DNA information generated 
by analyzing the DNA of the visitor. On the other hand, the 
authentication card lOB stores identity certification DNA 
information that is DNA information generated by analyzing the 
DNA of the visitor, in advance. It should be noted here that 

15 the DNA information is information that is generated by analyzing, 
for example, the hair, blood, or saliva of the visitor. 
[0355] 

Similarly, in the above-described Embodiment 4, the 
biometrics information may be, for example, fingerprint 

20 information, voiceprint information which indicates 
characteristics of the voiceprint of the visitor, iris information 
which indicates characteristics of the iris of the visitor, facial 
outline information which indicates characteristics of the facial 
outline of the visitor, DNA information which indicates 

25 characteristics of the DNA of the visitor, or any combination 
of these types of information. 

(19) In the above-described Embodiments 3 and 4, the 
identity authentication fingerprint information may be encrypted 
before it is output from the card reader to the user terminal. 



[0356] 

This can be achieved with a construction in which the card 
reader stores, in advance, an encryption key that is used for 
encrypting the identity authentication fingerprint information, 
5 and the user terminal stores, in advance, a decryption key that 
is used for decrypting encrypted identity authentication 
fingerprint information received from the card reader. 

(20) In the visit key authentication process in the 
above-described Embodiment 4, the secret key encryption process 

10 is used as the authentication method by the challenge-response 
system. However, not limited to this, another encryption process 
may be used as the authentication method by the challenge-response 
system as is the case with the above-described modification to 
the authentication method. Alternatively, another 

15 authentication method may be used as is the case with the 
above-described (1) . 
[0357] 

(21) In the above-described modification (1) to the 
authentication method, a public key is stored in the user terminal, 

20 and a secret key is stored in the authentication card. However, 
not limited to this, the following is possible. 

That is to say, a public key may be stored in the 
authentication card, and a secret key may be stored in the user 
terminal . The description of the operation in the authentication 

25 process is omitted here since it is the same as the case in which 
the secret key encryption process is used. 

(22) In the above-described Embodiments and modifications, 
the user terminal andthe cardreader of the identity authentication 
system are treated as separate apparatuses . However, not limited 



to this, the following is possible. 

[0358] 

That is to say, the user terminal and the card reader may 
be replaced with one apparatus that is composed of the user terminal 
5 and the card reader. 

Similarly, in the above-described modification to the 
communication method, the user terminal and the first input/ output 
apparatus may be replaced with one apparatus that is composed 
of the user terminal and the first input/output apparatus. 

10 (23) In Embodiment 4, the second random number is generated 

for use in an authentication that is performed based on the 
certification visit key and the authentication visit key. 
However, not limited to this, the following is possible. That 
is to say, without generating the second random number, the first 

15 random number that was used in a previous authentication may be 
used for use in the authentication that is performed based on 
the certification visit key and the authentication visit key. 
In this case, in the identity authentication process shown in 
Figs. 26 and 27, the step S715 is changed so that the first random 

20 number "Nl" stored in the random number storage area 250C is output 
to the card reader 30C, and in the succeeding operation, the first 
random number "Nl" is used instead of the second random number 
"N2". 
[0359] 

25 (24) In Embodiment 4, after the authentication that is 

performed based on the certification visit key and the 
authentication visit key, it is judged whether or not the 

certification time information and the certification business 
information contained in the certification visit information 
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respectively match the time information and the business 
information contained in the authentication visit information, 
and it is judged whether or not the current time falls into the 
visit time period. However, not limited to this, the following 
5 is possible. 

Without performing the authentication based on the 
certification visit key and the authentication visit key, after 
the authentication based on the identity authentication 
fingerprint information and the identity certification 

10 information is performed, it may be judged whether or not the 
certification time information and the certification business 
information contained in the certification visit information 
respectively match the time information and the business 
information contained in the authentication visit information, 

15 and it may be judged whether or not the current time falls into 
the visit time period. 
[0360] 

Alternatively, without performing the authentication based 
on the certification visit key and the authentication visit key, 

20 after the authentication based on the identity authentication 
fingerprint information and the identity certification 
information is performed, either of the judgment on whether or 
not the certification time information and the certification 
business information contained in the certification visit 

25 information respectively match the time information and the 
business information contained in the authentication visit 
information and the judgment on whether or not the current time 
falls into the visit time period may be made. 

Further, after the authentication based on the identity 
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authentication fingerprint information and the identity- 
certification information is performed, only the authentication 
based on the certification visit key and the authentication visit 
key may be performed. 
5 [0361] 

(25) In the above-described Embodiments 1, 2, and 3, only 
the certification key storage unit of the authentication card 
is tamper-resistant. However, other components may also be 
tamper-resistant . 

10 For example, in Embodiment 1, the certification key storage 

unit 101, the control unit 102, and the input/output unit 103 
of the authentication card 10 may be tamper-resistant. 

This also applies to Embodiment 4 . That is to say, although 
only the certification key storage unit and the visit key storage 

15 unit of the authentication card are tamper-resistant in Embodiment 
4, other components may also be tamper-resistant. 
[0362] 

(26) In the above-described Embodiments and modifications, 
the user terminal decrypts the encrypted information (in 

20 Embodiment 4, the first encrypted information) that is received 
from the authentication card, and judges whether or not the 
decrypting result matches the random number (in Embodiment 4, 
the first random number) that has been generated and stored therein . 
However, not limited to this, the following is possible. 

25 [0363] 

The user terminal may generate an encrypted random number 

by encrypting the random number (in Embodiment 4, the first random 
number) that has been generated and stored therein, using the 
identity authentication key (in Embodiments 3 and 4, the identity 
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authentication fingerprint information) that has been stored 
therein, and then judge whether or not the generated encrypted 
random number matches the encrypted information that has been 
received from the authentication card. If it judges that the 
5 encrypted random number matches the encrypted information, the 
user terminal determines that the authentication card is authentic, 
generates authentic visitor information and displays the 
generated authentic visitor information; and if it judges that 
the encrypted random number does not match the encrypted 
10 information, the user terminal determines that the authentication 
card is unauthentic, generates unauthentic visitor information 
and displays the generated unauthentic visitor information. 
[0364] 

(27) In the above-described Embodiments and modifications, 
15 the user terminal outputs the generated random number (in 
Embodiment 4, the first random number ) to the authentication card. 
However, the user terminal generate an encrypted random number 
by encrypting the random number using the identity authentication 
key (in Embodiments 3 and 4, the identity authentication 
20 fingerprint information) , and output the generated encrypted 
random number . 

In this case, upon receiving the encrypted random number 
from the user terminal, the authentication card decrypts the 
encrypted random number using the identity certification key, 
25 and outputs the decrypting result to the user terminal. Upon 
receiving the decrypting result, the user terminal judges whether 
or not the received decrypting result matches the stored random 
number (in Embodiment 4, the first random number) . If it judges 
that the decrypting result matches the random number, the user 
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terminal determines that the authentication card is authentic, 
generates authentic visitor information and displays the 
generated authentic visitor information; and if it judges that 
the encrypted random number does not match the encrypted 
5 information, the user terminal determines that the authentication 
card is unauthentic, generates unauthentic visitor information 
and displays the generated unauthentic visitor information. 
[0365] 

(28) In the authentication card IOC in the above-described 
10 Embodiment 4, the certification visit information and the 

certification business information, namely the certification 
visit information, may be encrypted before they are stored in 
the certification visit information table T300. 

In this case, the distribution apparatus 50C stores, in 

15 advance, an encryption key that is used for encrypting the 
certification visit information, encrypts the certification visit 
information using the stored encrypted key, and records the 
encrypted certification visit information into the authentication 
card IOC. Also, the user terminal 20C stores a decryption key 

20 that corresponds to the encryption key stored in the distribution 
apparatus 50C, and in case it performs the visit information 
authentication process, acquires the encrypted certification 
visit information from the authentication card IOC, generates 
certification visit information by decrypting the acquired 

25 encrypted certification visit information using the stored 
decryption key, and performs the visit information authentication 
process using the generated certification visit information. 
[0366] 

(29) The forwarding agent may visit an apartment in a 
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building. In this case, the card reader may be provided on the 
entrance door of each apartment in a building, or may be provided 
on the entrance door of the whole apartment building. 

(30) The card reader may detect the lock status of the door 
5 of a storage box which is placed outside the residence for storing 

delivered goods. 
[0367] 

(31) The target of the present invention is not limited 
to an ordinary residence, but may be a business user such as a 

10 company in so far as an article is delivered there. 

(32) The detection of how a door is locked may be applied 
to Embodiments 2, 3, and 4 the above-described modifications. 

(33) In Embodiment 1, the card reader 30 displays a door 
lock message if it does not detect the locked status. However, 

15 it may urge the user to lock the door by a warning beep. 
[0368] 

Alternatively, if the card reader 30 does not detect the 
locked status, the card reader 30 may lock the door through an 
electronic control. 
20 (34) The present invention may be methods shown by the above . 

The present invention may be a computer program that allows a 
computer to realize the methods, or may be digital signals 
representing the computer program. 
[0369] 

25 Furthermore, the present invention may be a 

computer-readable recording medium such as a flexible disk, a 
hard disk, CD-ROM, MO, DVD, DVD-ROM, DVD RAM, BD (Blu-ray Disc) , 
or a semiconductor memory, that stores the computer program or 
the digital signal. Furthermore, the present invention may be 



the computer program or the digital signal recorded on any of 

the aforementioned recording medium apparatuses. 

[0370] 

Furthermore, the present invention may be the computer 
5 program or the digital signal transmitted on a electric 
communication line, a wireless or wired communication line, or 
a network of which the Internet is representative. 

Furthermore, the present invention may be a computer system 
that includes a microprocessor and a memory, the memory storing 
10 the computer program, and the microprocessor operating according 
to the computer program. 
[0371] 

Furthermore, by transferring the program or the digital 
signal via the recording medium, or by transferring the program 

15 or the digital signal via the network or the like, the program 
or the digital signal may be executed by another independent 
computer system. 

(35) The present invention may be any combination of the 
above-described embodiments and modifications. 

20 

The above described identity authentication system can be 
used effectively, namely repetitively and continuously, in the 

industry in which a home-visit company sends a person to visit 
25 a residence of a user to provide the user with a service, such 
as the sales or delivery service. 
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